Changeset 0d3cd5d
- Timestamp:
- 06/12/2023 09:49:19 AM (12 months ago)
- Branches:
- 12.0, 12.1, kea, ken/TL2024, ken/tuningfonts, lazarus, plabs/newcss, python3.11, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/xf86-video-removal
- Children:
- baf6d5a0
- Parents:
- 930d002c
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
networking/connect/kea.xml
r930d002c r0d3cd5d 73 73 <bridgehead renderas="sect4">Required</bridgehead> 74 74 <para role="required"> 75 <xref linkend="boost"/>, 75 76 <xref linkend="log4cplus"/> 77 </para> 78 79 <bridgehead renderas="sect4">Optional</bridgehead> 80 <para role="optional"> 81 <xref linkend="doxygen"/>, 82 <xref linkend="graphviz"/>, 83 <xref linkend="mitkrb"/>, 84 <xref linkend="sphinx_rtd_theme"/> 85 </para> 86 87 <bridgehead renderas="sect4">Optional database backends</bridgehead> 88 <para role="optional"> 89 <xref linkend="mariadb"/> or <ulink url="https://www.mysql.com/">MySQL</ulink>, 90 <xref linkend="postgresql"/> 76 91 </para> 77 92 … … 132 147 133 148 <para> 134 <parameter>make -j1 install</parameter>: ISC doesn not recomment any form of 135 parallel or job server options when doing the install. 149 <parameter>--with-pgsql</parameter> or <parameter>--with-mysql</parameter>: 150 <application>ISC Kea</application> can store the leases on a 151 database. This might be useful in large environments running 152 a cluster of DHCP servers. Using the <emphasis>memfile</emphasis> 153 backend (which is a CSV file stored locally) is possible anyhow. 154 </para> 155 156 <para> 157 <parameter>make -j1 install</parameter>: ISC does not recommend 158 any form of parallel or job server options when doing the install. 136 159 </para> 137 160 … … 140 163 <sect2 role="configuration"> 141 164 <title>Configuring ISC Kea DHCP</title> 165 166 <para>The support of IPv4, IPv6 and DDNS has been splitted into 167 separate servers which runs independently from each other. Each 168 of them has its own configuration file. Additional configuration 169 files come from the keactrl agent which is uses to control the 170 servers in an easy way.</para> 142 171 143 172 <para>Consult the … … 149 178 for small networks with a few clients and low traffic. For greater 150 179 installations with thousands of clients, <application>ISC Kea</application> 151 can be configured to use databases (maria bdor postgresql) to store180 can be configured to use databases (mariadb or postgresql) to store 152 181 the leases and build a cluster with multiple nodes. It can 153 be integrated to <ulink url="https://www.isc.org/categories/stork/"> Stork</ulink>182 be integrated to <ulink url="https://www.isc.org/categories/stork/">ISC Stork</ulink> 154 183 which is a management dashboard to <application>ISC Kea</application>.</para> 155 156 157 <para>The support of IPv4, IPv6 and DDNS has been splitted into158 separate servers which runs independently from each other. Each159 of them has its own configuration file. Additional configuration160 files come from the keactrl agent which is uses to control the161 servers in an easy way.</para>162 184 163 185 <sect3 id="kea-dhcp-config"> … … 234 256 control agent (service providing a REST API), set 235 257 <literal>ctrl_agent=no</literal> in case the control agent 236 is not wanted.</para>258 is not needed.</para> 237 259 </listitem> 238 260 </itemizedlist> … … 283 305 <literal>// Begin /etc/kea/kea-dhcpd4.conf 284 306 { 285 "Dhcp4": {307 "Dhcp4": { 286 308 // Add names of your network interfaces to listen on. 287 309 "interfaces-config": { 288 310 "interfaces": [ "eth0", "eth2" ] 289 311 }, 290 312 291 313 "control-socket": { 292 293 314 "socket-type": "unix", 315 "socket-name": "/tmp/kea4-ctrl-socket" 294 316 }, 295 317 296 318 "lease-database": { 297 298 319 "type": "memfile", 320 "lfc-interval": 3600 299 321 }, 300 322 301 323 "expired-leases-processing": { 302 303 304 305 306 307 324 "reclaim-timer-wait-time": 10, 325 "flush-reclaimed-timer-wait-time": 25, 326 "hold-reclaimed-time": 3600, 327 "max-reclaim-leases": 100, 328 "max-reclaim-time": 250, 329 "unwarned-reclaim-cycles": 5 308 330 }, 309 331 … … 316 338 "ddns-qualifying-suffix": "your.domain.tld", 317 339 "dhcp-ddns" : { 318 340 "enable-updates": true 319 341 }, 320 342 321 343 "subnet4": [ 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 { 345 "subnet": "192.168.56.0/24", 346 "pools": [ { "pool": "192.168.56.16 - 192.168.56.254" } ], 347 "option-data": [ 348 { 349 "name": "domain-name", 350 "data": "your.domain.tld" 351 }, 352 { 353 "name": "domain-name-servers", 354 "data": "192.168.56.2, 192.168.3.7" 355 }, 356 { 357 "name": "domain-search", 358 "data": "your.domain.tld" 359 }, 360 { 361 "name": "routers", 362 "data": "192.168.56.2" 363 } 364 ] 365 } 344 366 ], 345 367 346 368 "loggers": [ 347 348 349 350 351 352 353 354 355 356 357 369 { 370 "name": "kea-dhcp4", 371 "output_options": [ 372 { 373 "output": "/var/log/kea-dhcp4.log", 374 "pattern": "%D{%Y-%m-%d %H:%M:%S.%q} %-5p %m\n" 375 } 376 ], 377 "severity": "INFO", 378 "debuglevel": 0 379 } 358 380 ] 359 }381 } 360 382 } 361 383 // End /etc/kea/kea-dhcpd4.conf</literal> 362 384 EOF</userinput></screen> 363 385 364 <note> 365 <para>The double braces at the end of the config is not a typo. 366 This is because the inner "dhcp4" block is not indented as is 367 should be because the configuration data would move too much 368 to the right.</para> 369 </note> 370 371 <para>The configuration for IPv6 is similar to the configuration 372 of IPv4. The configuration file is <filename>/etc/kea/kea-dhcpd6.conf</filename>.</para> 386 <para> 387 The configuration for IPv6 is similar to the configuration 388 of IPv4. The configuration file is 389 <filename>/etc/kea/kea-dhcpd6.conf</filename>. 390 </para> 373 391 374 392 </sect3> … … 389 407 <literal>// Begin /etc/kea/kea-dhcp-ddns.conf 390 408 { 391 "DhcpDdns": {409 "DhcpDdns": { 392 410 "ip-address": "127.0.0.1", 393 411 "port": 53001, 394 412 "control-socket": { 395 396 413 "socket-type": "unix", 414 "socket-name": "/tmp/kea-ddns-ctrl-socket" 397 415 }, 398 416 399 417 "tsig-keys": [ 418 { 419 "name" : "rndc-key", 420 "algorithm" : "hmac-sha256", 421 "secret" : "1FU5hD7faYaajQCjSdA54JkTPQxbbPrRnzOKqHcD9cM=" 422 } 423 ], 424 425 "forward-ddns" : { 426 "ddns-domains" : [ 400 427 { 401 "name" : "rndc-key", 402 "algorithm" : "hmac-sha256", 403 "secret" : "1FU5hD7faYaajQCjSdA54JkTPQxbbPrRnzOKqHcD9cM=" 428 "name" : "your.domain.tld.", 429 "dns-servers" : [ 430 { 431 "ip-address" : "127.0.0.1", 432 "port" : 53 433 } 434 ] 404 435 } 405 ], 406 407 "forward-ddns" : { 408 "ddns-domains" : [ 436 ] 437 }, 438 439 "reverse-ddns" : { 440 "ddns-domains" : [ 441 { 442 "name" : "56.168.192.in-addr.arpa.", 443 "dns-servers" : [ 409 444 { 410 "name" : "your.domain.tld.", 411 //"key-name" : "rndc-key", 412 "dns-servers" : [ 413 { 414 "ip-address" : "127.0.0.1", 415 "port" : 53 416 } 417 ] 445 "ip-address" : "127.0.0.1", 446 "port" : 53 418 447 } 419 ] 420 }, 421 422 "reverse-ddns" : { 423 "ddns-domains" : [ 424 { 425 "name" : "56.168.192.in-addr.arpa.", 426 //"key-name" : "rndc-key", 427 "dns-servers" : [ 428 { 429 "ip-address" : "127.0.0.1", 430 "port" : 53 431 } 432 ] 433 } 434 ] 448 ] 449 } 450 ] 435 451 }, 436 452 437 453 "loggers": [ 438 439 440 441 442 443 444 445 446 447 448 454 { 455 "name": "kea-dhcp-ddns", 456 "output_options": [ 457 { 458 "output": "/var/log/kea-ddns.log" 459 "pattern": "%D{%Y-%m-%d %H:%M:%S.%q} %-5p %m\n" 460 } 461 ], 462 "severity": "INFO", 463 "debuglevel": 0 464 } 449 465 ] 450 }466 } 451 467 } 452 468 // End /etc/kea/kea-dhcp-ddns.conf</literal> 453 469 EOF</userinput></screen> 470 471 <note> 472 <para> 473 The value of <literal>secret</literal> is just an example. 474 Generate the key for your installation by using the 475 <command>rndc-confgen -a</command> command or the 476 <command>tsig-keygen</command> command which both are 477 provided by <xref linkend="bind"/>. 478 </para> 479 </note> 480 454 481 </sect3> 455 482 … … 497 524 </varlistentry> 498 525 499 <!-- ... -->526 <!-- ...to be completed... --> 500 527 501 528 </variablelist>
Note:
See TracChangeset
for help on using the changeset viewer.