[c2ab6f4] | 1 | <?xml version="1.0" encoding="ISO-8859-1"?>
|
---|
| 2 | <!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
|
---|
| 3 | "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
---|
| 4 | <!ENTITY % general-entities SYSTEM "../../general.ent">
|
---|
| 5 | %general-entities;
|
---|
| 6 |
|
---|
| 7 | <!ENTITY kea-download-http "https://downloads.isc.org/isc/kea/&kea-dhcp-version;/kea-&kea-dhcp-version;.tar.gz">
|
---|
| 8 | <!ENTITY kea-download-ftp "ftp://ftp.isc.org/isc/kea/&kea-dhcp-version;/kea-&kea-dhcp-version;.tar.gz">
|
---|
[3b98d805] | 9 | <!ENTITY kea-md5sum "e01bdc8d68cfaca1cae17b20b26e09b6">
|
---|
| 10 | <!ENTITY kea-size "9.9 MB">
|
---|
[0dcde6e] | 11 | <!ENTITY kea-buildsize "1.1 GB">
|
---|
| 12 | <!ENTITY kea-time "14 SBU"><!-- Thats unexpectedly long -->
|
---|
[3b98d805] | 13 | <!ENTITY kea-arm-vers "&kea-dhcp-version;">
|
---|
[c2ab6f4] | 14 | ]>
|
---|
| 15 |
|
---|
[39aed8fc] | 16 | <sect1 id="kea" xreflabel="Kea-&kea-dhcp-version; DHCP Server">
|
---|
[c2ab6f4] | 17 | <?dbhtml filename="kea.html"?>
|
---|
| 18 |
|
---|
[39aed8fc] | 19 | <title>Kea &kea-dhcp-version; DHCP Server</title>
|
---|
[c2ab6f4] | 20 |
|
---|
| 21 | <indexterm zone="kea">
|
---|
[39aed8fc] | 22 | <primary sortas="a-KEA">Kea DHCP Server</primary>
|
---|
[c2ab6f4] | 23 | </indexterm>
|
---|
| 24 |
|
---|
| 25 | <sect2 role="package">
|
---|
[39aed8fc] | 26 | <title>Introduction to ISC Kea DHCP Server</title>
|
---|
[c2ab6f4] | 27 |
|
---|
| 28 | <para>
|
---|
[ead10d5] | 29 | The <application>ISC Kea</application> package contains the
|
---|
[c2ab6f4] | 30 | server programs for DHCP. It is the successor of the
|
---|
[194d47b] | 31 | old ISC DHCP server which is end-of-life since December 2022.
|
---|
[c2ab6f4] | 32 | </para>
|
---|
| 33 |
|
---|
[0f76bd9] | 34 | &lfs120_checked;
|
---|
[c2ab6f4] | 35 |
|
---|
| 36 | <bridgehead renderas="sect3">Package Information</bridgehead>
|
---|
| 37 | <itemizedlist spacing="compact">
|
---|
| 38 | <listitem>
|
---|
| 39 | <para>
|
---|
| 40 | Download (HTTP): <ulink url="&kea-download-http;"/>
|
---|
| 41 | </para>
|
---|
| 42 | </listitem>
|
---|
| 43 | <listitem>
|
---|
| 44 | <para>
|
---|
| 45 | Download (FTP): <ulink url="&kea-download-ftp;"/>
|
---|
| 46 | </para>
|
---|
| 47 | </listitem>
|
---|
| 48 | <listitem>
|
---|
| 49 | <para>
|
---|
| 50 | Download MD5 sum: &kea-md5sum;
|
---|
| 51 | </para>
|
---|
| 52 | </listitem>
|
---|
| 53 | <listitem>
|
---|
| 54 | <para>
|
---|
| 55 | Download size: &kea-size;
|
---|
| 56 | </para>
|
---|
| 57 | </listitem>
|
---|
| 58 | <listitem>
|
---|
| 59 | <para>
|
---|
| 60 | Estimated disk space required: &kea-buildsize;
|
---|
| 61 | </para>
|
---|
| 62 | </listitem>
|
---|
| 63 | <listitem>
|
---|
| 64 | <para>
|
---|
| 65 | Estimated build time: &kea-time;
|
---|
| 66 | </para>
|
---|
| 67 | </listitem>
|
---|
| 68 | </itemizedlist>
|
---|
| 69 |
|
---|
| 70 | <bridgehead renderas="sect3">Kea Dependencies</bridgehead>
|
---|
| 71 |
|
---|
| 72 | <bridgehead renderas="sect4">Required</bridgehead>
|
---|
| 73 | <para role="required">
|
---|
[39aed8fc] | 74 | <xref linkend="boost"/> and
|
---|
[c2ab6f4] | 75 | <xref linkend="log4cplus"/>
|
---|
| 76 | </para>
|
---|
[ead10d5] | 77 |
|
---|
[4df5695d] | 78 | <bridgehead renderas="sect4">Optional</bridgehead>
|
---|
[0d3cd5d] | 79 | <para role="optional">
|
---|
[4df5695d] | 80 | <xref linkend="mitkrb"/>, for documentation
|
---|
[0d3cd5d] | 81 | <xref linkend="doxygen"/>,
|
---|
[39aed8fc] | 82 | <xref linkend="graphviz"/>, and
|
---|
[0d3cd5d] | 83 | <xref linkend="sphinx_rtd_theme"/>
|
---|
| 84 | </para>
|
---|
| 85 |
|
---|
| 86 | <bridgehead renderas="sect4">Optional database backends</bridgehead>
|
---|
| 87 | <para role="optional">
|
---|
[39aed8fc] | 88 | <xref linkend="mariadb"/> or <ulink url="https://www.mysql.com/">MySQL</ulink>, and
|
---|
[0d3cd5d] | 89 | <xref linkend="postgresql"/>
|
---|
| 90 | </para>
|
---|
[4df5695d] | 91 | <!--
|
---|
| 92 | <para condition="html" role="usernotes">Editor Notes:
|
---|
[c2ab6f4] | 93 | <ulink url="&blfs-wiki;/kea"/>
|
---|
| 94 | </para>
|
---|
[4df5695d] | 95 | -->
|
---|
[c2ab6f4] | 96 | </sect2>
|
---|
| 97 |
|
---|
| 98 | <sect2 role="kernel" id="kea-dhcp-kernel">
|
---|
| 99 | <title>Kernel Configuration</title>
|
---|
| 100 |
|
---|
| 101 | <para>
|
---|
| 102 | You must have Packet Socket support. IPv6 support is optional.
|
---|
| 103 | </para>
|
---|
| 104 |
|
---|
[0add366] | 105 | <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
|
---|
| 106 | href="kea-kernel.xml"/>
|
---|
| 107 |
|
---|
[c2ab6f4] | 108 | <indexterm zone="kea kea-dhcp-kernel">
|
---|
| 109 | <primary sortas="k-KEA">Kea</primary>
|
---|
| 110 | </indexterm>
|
---|
| 111 |
|
---|
| 112 | </sect2>
|
---|
| 113 |
|
---|
| 114 | <sect2 role="installation">
|
---|
[39aed8fc] | 115 | <title>Installation of ISC Kea DHCP Server</title>
|
---|
[c2ab6f4] | 116 |
|
---|
| 117 | <para>
|
---|
[39aed8fc] | 118 | Install <application>ISC Kea DHCP Server</application> by running
|
---|
[c2ab6f4] | 119 | the following commands:
|
---|
| 120 | </para>
|
---|
| 121 |
|
---|
| 122 | <screen><userinput>./configure --prefix=/usr \
|
---|
| 123 | --sysconfdir=/etc \
|
---|
| 124 | --docdir=/usr/share/doc/kea-&kea-dhcp-version; \
|
---|
| 125 | --localstatedir=/var \
|
---|
| 126 | --enable-shell \
|
---|
[0dcde6e] | 127 | --with-openssl \
|
---|
| 128 | --disable-static &&
|
---|
[c2ab6f4] | 129 | make</userinput></screen>
|
---|
| 130 |
|
---|
| 131 | <para>
|
---|
| 132 | To test the results, issue: <command>make check</command>.
|
---|
| 133 | </para>
|
---|
| 134 |
|
---|
| 135 | <para>
|
---|
[39aed8fc] | 136 | To install the <application>ISC Kea DHCP Server</application> suite,
|
---|
[c2ab6f4] | 137 | issue the following commands as the
|
---|
| 138 | <systemitem class="username">root</systemitem> user:
|
---|
| 139 | </para>
|
---|
| 140 |
|
---|
[4d418ccd] | 141 | <screen role="root"><userinput>make -j1 install</userinput></screen>
|
---|
[c2ab6f4] | 142 |
|
---|
| 143 | </sect2>
|
---|
| 144 |
|
---|
[4d418ccd] | 145 | <sect2 role="commands">
|
---|
| 146 | <title>Command Explanations</title>
|
---|
| 147 |
|
---|
| 148 | <para>
|
---|
[0d3cd5d] | 149 | <parameter>--with-pgsql</parameter> or <parameter>--with-mysql</parameter>:
|
---|
| 150 | <application>ISC Kea</application> can store the leases on a
|
---|
| 151 | database. This might be useful in large environments running
|
---|
| 152 | a cluster of DHCP servers. Using the <emphasis>memfile</emphasis>
|
---|
| 153 | backend (which is a CSV file stored locally) is possible anyhow.
|
---|
| 154 | </para>
|
---|
| 155 |
|
---|
[baf6d5a0] | 156 | <para>
|
---|
| 157 | <parameter>--enable-generate-docs</parameter>:
|
---|
| 158 | If documentation is to be rebuilt, add that option. Several
|
---|
| 159 | dependencies must be installed for generating the documentation.
|
---|
| 160 | </para>
|
---|
| 161 |
|
---|
[0d3cd5d] | 162 | <para>
|
---|
| 163 | <parameter>make -j1 install</parameter>: ISC does not recommend
|
---|
| 164 | any form of parallel or job server options when doing the install.
|
---|
[4d418ccd] | 165 | </para>
|
---|
| 166 |
|
---|
| 167 | </sect2>
|
---|
[ead10d5] | 168 |
|
---|
[c2ab6f4] | 169 | <sect2 role="configuration">
|
---|
[39aed8fc] | 170 | <title>Configuring ISC Kea DHCP Server</title>
|
---|
[c2ab6f4] | 171 |
|
---|
[0c76f3cf] | 172 | <para>The support of IPv4, IPv6 and DDNS has been split into
|
---|
[0d3cd5d] | 173 | separate servers which runs independently from each other. Each
|
---|
| 174 | of them has its own configuration file. Additional configuration
|
---|
| 175 | files come from the keactrl agent which is uses to control the
|
---|
| 176 | servers in an easy way.</para>
|
---|
| 177 |
|
---|
[ead10d5] | 178 | <para>Consult the
|
---|
| 179 | <ulink url="https://kea.readthedocs.io/en/kea-&kea-arm-vers;/">Kea Administrator Reference Manual</ulink>
|
---|
[12c88b0] | 180 | for detailed information about the configuration of <application>ISC Kea</application>
|
---|
[ead10d5] | 181 | as it is a quite capable system. The configuration shown a bare
|
---|
| 182 | minimum to get a DHCP server running but it already includes
|
---|
| 183 | configuration for DDNS (Dynamic DNS). That setup might be working
|
---|
| 184 | for small networks with a few clients and low traffic. For greater
|
---|
| 185 | installations with thousands of clients, <application>ISC Kea</application>
|
---|
[0d3cd5d] | 186 | can be configured to use databases (mariadb or postgresql) to store
|
---|
[ead10d5] | 187 | the leases and build a cluster with multiple nodes. It can
|
---|
[0d3cd5d] | 188 | be integrated to <ulink url="https://www.isc.org/categories/stork/">ISC Stork</ulink>
|
---|
[ead10d5] | 189 | which is a management dashboard to <application>ISC Kea</application>.</para>
|
---|
| 190 |
|
---|
[0dcde6e] | 191 | <para>
|
---|
| 192 | If you want to start the DHCP Server at boot, install the
|
---|
| 193 | <phrase revision="sysv"><filename>/etc/rc.d/init.d/kea-dhcpd</filename>
|
---|
| 194 | init script</phrase>
|
---|
| 195 | <phrase revision="systemd"><filename>kea-dhcpd.service</filename>
|
---|
| 196 | unit</phrase> included in the
|
---|
| 197 | <xref linkend="bootscripts" revision="sysv"/>
|
---|
| 198 | <xref linkend="systemd-units" revision="systemd"/>
|
---|
| 199 | package:
|
---|
| 200 | </para>
|
---|
| 201 |
|
---|
| 202 | <screen role="root"><userinput>make install-kea-dhcpd</userinput></screen>
|
---|
| 203 |
|
---|
[c2ab6f4] | 204 | <sect3 id="kea-dhcp-config">
|
---|
| 205 | <title>Config Files</title>
|
---|
| 206 |
|
---|
| 207 | <para>
|
---|
| 208 | <filename>/etc/kea/keactrl.conf</filename>,
|
---|
| 209 | <filename>/etc/kea/kea-ctrl-agent.conf</filename>,
|
---|
| 210 | <filename>/etc/kea/kea-dhcp4.conf</filename>,
|
---|
| 211 | <filename>/etc/kea/kea-dhcp6.conf</filename> and
|
---|
| 212 | <filename>/etc/kea/kea-dhcp-ddns.conf</filename>
|
---|
| 213 | </para>
|
---|
[4d418ccd] | 214 |
|
---|
[c2ab6f4] | 215 | <indexterm zone="kea keactrl-config">
|
---|
| 216 | <primary sortas="e-etc-kea-keactrl.conf">/etc/kea/keactrl.conf</primary>
|
---|
| 217 | </indexterm>
|
---|
[0dcde6e] | 218 |
|
---|
[c2ab6f4] | 219 | <indexterm zone="kea kea-ctrl-agent-config">
|
---|
| 220 | <primary sortas="e-etc-kea-kea-ctrl-agent.conf">/etc/kea/kea-ctrl-agent.conf</primary>
|
---|
| 221 | </indexterm>
|
---|
[0dcde6e] | 222 |
|
---|
[c2ab6f4] | 223 | <indexterm zone="kea kea-dhcp4-config">
|
---|
| 224 | <primary sortas="e-etc-kea-dhcp4.conf">/etc/kea/kea-dhcp4.conf</primary>
|
---|
| 225 | </indexterm>
|
---|
[4d418ccd] | 226 | <!--
|
---|
[c2ab6f4] | 227 | <indexterm zone="kea kea-dhcp6-config">
|
---|
| 228 | <primary sortas="e-etc-kea-dhcp6.conf">/etc/kea/kea-dhcp6.conf</primary>
|
---|
| 229 | </indexterm>
|
---|
[ead10d5] | 230 | -->
|
---|
[c2ab6f4] | 231 | <indexterm zone="kea kea-dhcp-ddns-config">
|
---|
| 232 | <primary sortas="e-etc-kea-dhcp-ddns.conf">/etc/kea/kea-dhcp-ddns.conf</primary>
|
---|
| 233 | </indexterm>
|
---|
| 234 | </sect3>
|
---|
| 235 |
|
---|
| 236 | <sect3 id="keactrl-config">
|
---|
| 237 | <title>Kea Control Configuration</title>
|
---|
[4d418ccd] | 238 |
|
---|
[c2ab6f4] | 239 | <para><command>keactrl</command> is used to control the
|
---|
[d908ba4] | 240 | independent servers (IPv4, IPv6, DDNS). Its configuration file
|
---|
[c2ab6f4] | 241 | <filename>/etc/kea/keactrl.conf</filename> is installed by
|
---|
| 242 | default and includes many path settings which are defined
|
---|
| 243 | due to the <command>configure</command> at build time. It also
|
---|
| 244 | includes settings to specify which of the servers should be
|
---|
| 245 | started.</para>
|
---|
| 246 |
|
---|
| 247 | <itemizedlist>
|
---|
[0dcde6e] | 248 | <listitem>
|
---|
| 249 | <para>Control Agent</para>
|
---|
| 250 | <para>The Control Agent is a daemon which allows the
|
---|
| 251 | (re)configuration of the Kea DHCP service via REST API.
|
---|
| 252 | Set <literal>ctrl_agent=yes</literal> to start the
|
---|
| 253 | control agent (service providing a REST API), set
|
---|
| 254 | <literal>ctrl_agent=no</literal> in case the control agent
|
---|
| 255 | is not needed.</para>
|
---|
| 256 | </listitem>
|
---|
[c2ab6f4] | 257 | <listitem>
|
---|
| 258 | <para>IPv4 DHCP server</para>
|
---|
[4d418ccd] | 259 | <para>This daemon handles requests for IPv4 addresses.
|
---|
[ead10d5] | 260 | Set <literal>dhcp4=yes</literal> to start it, set
|
---|
[c2ab6f4] | 261 | <literal>dhcp4=no</literal> in case DHCP service for IPv4
|
---|
| 262 | is not wanted.</para>
|
---|
| 263 | </listitem>
|
---|
| 264 | <listitem>
|
---|
| 265 | <para>IPv6 DHCP server</para>
|
---|
[4d418ccd] | 266 | <para>This daemon handles requests for IPv6 addresses.
|
---|
[ead10d5] | 267 | Set <literal>dhcp6=yes</literal> to start it, set
|
---|
[c2ab6f4] | 268 | <literal>dhcp6=no</literal> in case DHCP service for IPv6
|
---|
| 269 | is not wanted.</para>
|
---|
| 270 | </listitem>
|
---|
| 271 | <listitem>
|
---|
| 272 | <para>Dynamic DNS</para>
|
---|
[4d418ccd] | 273 | <para>This daemon is used to update a DNS server dynamically
|
---|
[6886d51] | 274 | when Kea assigns an IP address to a device.
|
---|
[ead10d5] | 275 | Set <literal>dhcp_ddns=yes</literal> to enable it, set
|
---|
[c2ab6f4] | 276 | <literal>dhcp_ddns=no</literal> in case dynamic DNS updates
|
---|
| 277 | are not wanted.</para>
|
---|
| 278 | </listitem>
|
---|
| 279 | </itemizedlist>
|
---|
| 280 |
|
---|
| 281 | <para>The Netconf service is not installed because required
|
---|
| 282 | dependencies are not covered by the current BLFS book.</para>
|
---|
[4d418ccd] | 283 |
|
---|
| 284 | <para>With the following command, Kea will be configured to
|
---|
[ead10d5] | 285 | start the dhcp service for IPv4 and the
|
---|
[4d418ccd] | 286 | dynamic DNS update, while the control agent and
|
---|
| 287 | the dhcp service for IPv6 remains down. Tweak the command to
|
---|
| 288 | match your needs on started services and execute as the
|
---|
| 289 | <systemitem class="username">root</systemitem> user:</para>
|
---|
| 290 |
|
---|
| 291 | <screen><userinput role="root">sed -e "s/^dhcp4=.*/dhcp4=yes/" \
|
---|
| 292 | -e "s/^dhcp6=.*/dhcp6=no/" \
|
---|
| 293 | -e "s/^dhcp_ddns=.*/dhcp_ddns=yes/" \
|
---|
| 294 | -e "s/^ctrl_agent=.*/ctrl_agent=no/" \
|
---|
| 295 | -i /etc/kea/keactrl.conf
|
---|
| 296 | </userinput></screen>
|
---|
| 297 |
|
---|
[c2ab6f4] | 298 | </sect3>
|
---|
| 299 |
|
---|
[0dcde6e] | 300 | <sect3 id="kea-ctrl-agent-config">
|
---|
| 301 | <title>Control Agent Configuration</title>
|
---|
[ead10d5] | 302 |
|
---|
| 303 | <para>
|
---|
[0dcde6e] | 304 | The provided configuration could be used without changes
|
---|
[ccbeb94] | 305 | but in BLFS objects like sockets are stored in
|
---|
[0dcde6e] | 306 | <filename class="directory">/run</filename>
|
---|
| 307 | rather than in
|
---|
| 308 | <filename class="directory">/tmp</filename>.
|
---|
[ead10d5] | 309 | </para>
|
---|
| 310 |
|
---|
[4df5695d] | 311 | <screen role="nodump"><userinput>cat > /etc/kea/kea-ctrl-agent.conf << "EOF"
|
---|
[0dcde6e] | 312 | <literal>// Begin /etc/kea/kea-ctrl-agent.conf
|
---|
| 313 | {
|
---|
| 314 | // This is a basic configuration for the Kea Control Agent.
|
---|
| 315 | // RESTful interface to be available at http://127.0.0.1:8000/
|
---|
| 316 | "Control-agent": {
|
---|
| 317 | "http-host": "127.0.0.1",
|
---|
| 318 | "http-port": 8000,
|
---|
| 319 | "control-sockets": {
|
---|
| 320 | "dhcp4": {
|
---|
| 321 | "socket-type": "unix",
|
---|
| 322 | "socket-name": "/run/kea4-ctrl-socket"
|
---|
| 323 | },
|
---|
| 324 | "dhcp6": {
|
---|
| 325 | "socket-type": "unix",
|
---|
| 326 | "socket-name": "/run/kea6-ctrl-socket"
|
---|
| 327 | },
|
---|
| 328 | "d2": {
|
---|
| 329 | "socket-type": "unix",
|
---|
| 330 | "socket-name": "/run/kea-ddns-ctrl-socket"
|
---|
| 331 | }
|
---|
| 332 | },
|
---|
| 333 |
|
---|
| 334 | "loggers": [
|
---|
| 335 | {
|
---|
| 336 | "name": "kea-ctrl-agent",
|
---|
| 337 | "output_options": [
|
---|
| 338 | {
|
---|
| 339 | "output": "/var/log/kea-ctrl-agent.log"
|
---|
| 340 | "pattern": "%D{%Y-%m-%d %H:%M:%S.%q} %-5p %m\n"
|
---|
| 341 | }
|
---|
| 342 | ],
|
---|
| 343 | "severity": "INFO",
|
---|
| 344 | "debuglevel": 0
|
---|
| 345 | }
|
---|
| 346 | ]
|
---|
| 347 | }
|
---|
| 348 | }
|
---|
| 349 | // End /etc/kea/kea-ctrl-agent.conf</literal>
|
---|
| 350 | EOF</userinput></screen>
|
---|
| 351 |
|
---|
| 352 | </sect3>
|
---|
| 353 |
|
---|
| 354 | <sect3 id="kea-dhcp4-config">
|
---|
| 355 | <title>IPv4 DHCP Server Configuration</title>
|
---|
[c2ab6f4] | 356 |
|
---|
| 357 | <para>
|
---|
[5571805] | 358 | A sample configuration file is created in <filename>/etc/kea/kea-dhcp4.conf</filename>.
|
---|
[c2ab6f4] | 359 | Adjust the file to suit your needs or overwrite it by using
|
---|
| 360 | the following sample as the <systemitem class="username">root</systemitem>
|
---|
| 361 | user:
|
---|
| 362 | </para>
|
---|
| 363 |
|
---|
[4df5695d] | 364 | <screen role="nodump"><userinput>cat > /etc/kea/kea-dhcp4.conf << "EOF"
|
---|
[5571805] | 365 | <literal>// Begin /etc/kea/kea-dhcp4.conf
|
---|
[4d418ccd] | 366 | {
|
---|
[0d3cd5d] | 367 | "Dhcp4": {
|
---|
[ead10d5] | 368 | // Add names of your network interfaces to listen on.
|
---|
[c2ab6f4] | 369 | "interfaces-config": {
|
---|
[0d3cd5d] | 370 | "interfaces": [ "eth0", "eth2" ]
|
---|
[c2ab6f4] | 371 | },
|
---|
[ead10d5] | 372 |
|
---|
[c2ab6f4] | 373 | "control-socket": {
|
---|
[0d3cd5d] | 374 | "socket-type": "unix",
|
---|
[0dcde6e] | 375 | "socket-name": "/run/kea4-ctrl-socket"
|
---|
[c2ab6f4] | 376 | },
|
---|
[ead10d5] | 377 |
|
---|
[c2ab6f4] | 378 | "lease-database": {
|
---|
[0d3cd5d] | 379 | "type": "memfile",
|
---|
| 380 | "lfc-interval": 3600
|
---|
[c2ab6f4] | 381 | },
|
---|
[ead10d5] | 382 |
|
---|
| 383 | "expired-leases-processing": {
|
---|
[0d3cd5d] | 384 | "reclaim-timer-wait-time": 10,
|
---|
| 385 | "flush-reclaimed-timer-wait-time": 25,
|
---|
| 386 | "hold-reclaimed-time": 3600,
|
---|
| 387 | "max-reclaim-leases": 100,
|
---|
| 388 | "max-reclaim-time": 250,
|
---|
| 389 | "unwarned-reclaim-cycles": 5
|
---|
[ead10d5] | 390 | },
|
---|
| 391 |
|
---|
[c2ab6f4] | 392 | "renew-timer": 900,
|
---|
| 393 | "rebind-timer": 1800,
|
---|
| 394 | "valid-lifetime": 3600,
|
---|
[ead10d5] | 395 |
|
---|
| 396 | // Enable DDNS - Kea will dynamically update the DNS
|
---|
| 397 | "ddns-send-updates" : true,
|
---|
| 398 | "ddns-qualifying-suffix": "your.domain.tld",
|
---|
| 399 | "dhcp-ddns" : {
|
---|
[0d3cd5d] | 400 | "enable-updates": true
|
---|
[ead10d5] | 401 | },
|
---|
| 402 |
|
---|
[c2ab6f4] | 403 | "subnet4": [
|
---|
[0d3cd5d] | 404 | {
|
---|
| 405 | "subnet": "192.168.56.0/24",
|
---|
| 406 | "pools": [ { "pool": "192.168.56.16 - 192.168.56.254" } ],
|
---|
| 407 | "option-data": [
|
---|
| 408 | {
|
---|
| 409 | "name": "domain-name",
|
---|
| 410 | "data": "your.domain.tld"
|
---|
| 411 | },
|
---|
| 412 | {
|
---|
| 413 | "name": "domain-name-servers",
|
---|
| 414 | "data": "192.168.56.2, 192.168.3.7"
|
---|
| 415 | },
|
---|
| 416 | {
|
---|
| 417 | "name": "domain-search",
|
---|
| 418 | "data": "your.domain.tld"
|
---|
| 419 | },
|
---|
| 420 | {
|
---|
| 421 | "name": "routers",
|
---|
| 422 | "data": "192.168.56.2"
|
---|
| 423 | }
|
---|
| 424 | ]
|
---|
| 425 | }
|
---|
[ead10d5] | 426 | ],
|
---|
| 427 |
|
---|
| 428 | "loggers": [
|
---|
[0d3cd5d] | 429 | {
|
---|
| 430 | "name": "kea-dhcp4",
|
---|
| 431 | "output_options": [
|
---|
| 432 | {
|
---|
| 433 | "output": "/var/log/kea-dhcp4.log",
|
---|
| 434 | "pattern": "%D{%Y-%m-%d %H:%M:%S.%q} %-5p %m\n"
|
---|
| 435 | }
|
---|
| 436 | ],
|
---|
| 437 | "severity": "INFO",
|
---|
| 438 | "debuglevel": 0
|
---|
| 439 | }
|
---|
[c2ab6f4] | 440 | ]
|
---|
[0d3cd5d] | 441 | }
|
---|
[4d418ccd] | 442 | }
|
---|
[5571805] | 443 | // End /etc/kea/kea-dhcp4.conf</literal>
|
---|
[c2ab6f4] | 444 | EOF</userinput></screen>
|
---|
| 445 |
|
---|
[0d3cd5d] | 446 | <para>
|
---|
| 447 | The configuration for IPv6 is similar to the configuration
|
---|
| 448 | of IPv4. The configuration file is
|
---|
[5571805] | 449 | <filename>/etc/kea/kea-dhcp6.conf</filename>.
|
---|
[0d3cd5d] | 450 | </para>
|
---|
[c2ab6f4] | 451 |
|
---|
[ead10d5] | 452 | </sect3>
|
---|
| 453 |
|
---|
| 454 | <sect3 id="kea-dhcp-ddns-config">
|
---|
| 455 | <title>Dynamic DNS Configuration</title>
|
---|
| 456 |
|
---|
[c2ab6f4] | 457 | <para>
|
---|
[0dcde6e] | 458 | If there is a <xref linkend="bind"/> server running,
|
---|
| 459 | <application>ISC Kea</application> can update the DNS when
|
---|
| 460 | it gives an IP address to a client. A sample configuration
|
---|
| 461 | file is created in <filename>/etc/kea/kea-dhcp-ddns.conf</filename>.
|
---|
[ead10d5] | 462 | Adjust the file to suit your needs or overwrite it by using
|
---|
| 463 | the following sample as the <systemitem class="username">root</systemitem>
|
---|
| 464 | user:
|
---|
[c2ab6f4] | 465 | </para>
|
---|
| 466 |
|
---|
[ead10d5] | 467 | <screen role="nodump" ><userinput>cat > /etc/kea/kea-dhcp-ddns.conf << "EOF"
|
---|
| 468 | <literal>// Begin /etc/kea/kea-dhcp-ddns.conf
|
---|
| 469 | {
|
---|
[0d3cd5d] | 470 | "DhcpDdns": {
|
---|
[ead10d5] | 471 | "ip-address": "127.0.0.1",
|
---|
| 472 | "port": 53001,
|
---|
| 473 | "control-socket": {
|
---|
[0d3cd5d] | 474 | "socket-type": "unix",
|
---|
[0dcde6e] | 475 | "socket-name": "/run/kea-ddns-ctrl-socket"
|
---|
[ead10d5] | 476 | },
|
---|
| 477 |
|
---|
| 478 | "tsig-keys": [
|
---|
[0d3cd5d] | 479 | {
|
---|
| 480 | "name" : "rndc-key",
|
---|
| 481 | "algorithm" : "hmac-sha256",
|
---|
| 482 | "secret" : "1FU5hD7faYaajQCjSdA54JkTPQxbbPrRnzOKqHcD9cM="
|
---|
| 483 | }
|
---|
[ead10d5] | 484 | ],
|
---|
| 485 |
|
---|
| 486 | "forward-ddns" : {
|
---|
[0d3cd5d] | 487 | "ddns-domains" : [
|
---|
| 488 | {
|
---|
| 489 | "name" : "your.domain.tld.",
|
---|
[da1d238] | 490 | "key-name": "rndc-key",
|
---|
[0d3cd5d] | 491 | "dns-servers" : [
|
---|
[ead10d5] | 492 | {
|
---|
[0d3cd5d] | 493 | "ip-address" : "127.0.0.1",
|
---|
| 494 | "port" : 53
|
---|
[ead10d5] | 495 | }
|
---|
[0d3cd5d] | 496 | ]
|
---|
| 497 | }
|
---|
| 498 | ]
|
---|
[ead10d5] | 499 | },
|
---|
| 500 |
|
---|
| 501 | "reverse-ddns" : {
|
---|
[0d3cd5d] | 502 | "ddns-domains" : [
|
---|
| 503 | {
|
---|
| 504 | "name" : "56.168.192.in-addr.arpa.",
|
---|
[da1d238] | 505 | "key-name": "rndc-key",
|
---|
[0d3cd5d] | 506 | "dns-servers" : [
|
---|
[ead10d5] | 507 | {
|
---|
[0d3cd5d] | 508 | "ip-address" : "127.0.0.1",
|
---|
| 509 | "port" : 53
|
---|
[ead10d5] | 510 | }
|
---|
[0d3cd5d] | 511 | ]
|
---|
| 512 | }
|
---|
| 513 | ]
|
---|
[ead10d5] | 514 | },
|
---|
[c2ab6f4] | 515 |
|
---|
[ead10d5] | 516 | "loggers": [
|
---|
[0d3cd5d] | 517 | {
|
---|
| 518 | "name": "kea-dhcp-ddns",
|
---|
| 519 | "output_options": [
|
---|
| 520 | {
|
---|
[057e7a1] | 521 | "output": "/var/log/kea-ddns.log",
|
---|
[0d3cd5d] | 522 | "pattern": "%D{%Y-%m-%d %H:%M:%S.%q} %-5p %m\n"
|
---|
| 523 | }
|
---|
| 524 | ],
|
---|
| 525 | "severity": "INFO",
|
---|
| 526 | "debuglevel": 0
|
---|
| 527 | }
|
---|
[ead10d5] | 528 | ]
|
---|
[0d3cd5d] | 529 | }
|
---|
[ead10d5] | 530 | }
|
---|
| 531 | // End /etc/kea/kea-dhcp-ddns.conf</literal>
|
---|
| 532 | EOF</userinput></screen>
|
---|
[0d3cd5d] | 533 |
|
---|
| 534 | <note>
|
---|
| 535 | <para>
|
---|
| 536 | The value of <literal>secret</literal> is just an example.
|
---|
| 537 | Generate the key for your installation by using the
|
---|
| 538 | <command>rndc-confgen -a</command> command or the
|
---|
| 539 | <command>tsig-keygen</command> command which both are
|
---|
| 540 | provided by <xref linkend="bind"/>.
|
---|
| 541 | </para>
|
---|
[0dcde6e] | 542 | <para>
|
---|
| 543 | In this sample config it is assumed that the DNS server
|
---|
| 544 | runs on the same machine as Kea does (accessable via
|
---|
| 545 | <literal>127.0.0.1</literal>) and that this machine has
|
---|
| 546 | the IP <literal>192.168.56.2</literal>.
|
---|
| 547 | </para>
|
---|
[0d3cd5d] | 548 | </note>
|
---|
| 549 |
|
---|
[c2ab6f4] | 550 | </sect3>
|
---|
| 551 |
|
---|
| 552 | </sect2>
|
---|
| 553 |
|
---|
| 554 | <sect2 role="content">
|
---|
| 555 | <title>Contents</title>
|
---|
| 556 |
|
---|
| 557 | <segmentedlist>
|
---|
| 558 | <segtitle>Installed Programs</segtitle>
|
---|
| 559 | <segtitle>Installed Libraries</segtitle>
|
---|
| 560 | <segtitle>Installed Directories</segtitle>
|
---|
| 561 |
|
---|
| 562 | <seglistitem>
|
---|
| 563 | <seg>
|
---|
| 564 | keactrl, kea-admin, kea-ctrl-agent, kea-dhcp4, kea-dhcp6,
|
---|
| 565 | kea-dhcp-ddns, kea-lfc, kea-shell
|
---|
| 566 | </seg>
|
---|
| 567 | <seg>
|
---|
| 568 | libkea-*
|
---|
| 569 | </seg>
|
---|
| 570 | <seg>
|
---|
| 571 | /etc/kea,
|
---|
| 572 | /usr/include/kea,
|
---|
| 573 | /var/lib/kea
|
---|
| 574 | </seg>
|
---|
| 575 | </seglistitem>
|
---|
| 576 | </segmentedlist>
|
---|
| 577 |
|
---|
| 578 | <variablelist>
|
---|
| 579 | <bridgehead renderas="sect3">Short Descriptions</bridgehead>
|
---|
| 580 | <?dbfo list-presentation="list"?>
|
---|
| 581 | <?dbhtml list-presentation="table"?>
|
---|
| 582 |
|
---|
| 583 | <varlistentry id="keactrl">
|
---|
| 584 | <term><command>keactrl</command></term>
|
---|
| 585 | <listitem>
|
---|
| 586 | <para>
|
---|
[ccbeb94] | 587 | Tool to control (start/stop) the server processes.
|
---|
[c2ab6f4] | 588 | </para>
|
---|
| 589 | <indexterm zone="kea keactrl">
|
---|
| 590 | <primary sortas="b-keactrl">keactrl</primary>
|
---|
| 591 | </indexterm>
|
---|
| 592 | </listitem>
|
---|
| 593 | </varlistentry>
|
---|
[ccbeb94] | 594 | <varlistentry id="kea-admin">
|
---|
| 595 | <term><command>kea-admin</command></term>
|
---|
| 596 | <listitem>
|
---|
| 597 | <para>
|
---|
| 598 | kea-admin is a shell script which offers database maintenance.
|
---|
| 599 | </para>
|
---|
| 600 | <indexterm zone="kea kea-admin">
|
---|
| 601 | <primary sortas="b-kea-admin">kea-admin</primary>
|
---|
| 602 | </indexterm>
|
---|
| 603 | </listitem>
|
---|
| 604 | </varlistentry>
|
---|
| 605 | <varlistentry id="kea-ctrl-agent">
|
---|
| 606 | <term><command>kea-ctrl-agent</command></term>
|
---|
| 607 | <listitem>
|
---|
| 608 | <para>
|
---|
| 609 | Daemon which exposes a RESTful control interface for
|
---|
| 610 | managing Kea servers.
|
---|
| 611 | </para>
|
---|
| 612 | <indexterm zone="kea kea-ctrl-agent">
|
---|
| 613 | <primary sortas="b-kea-ctrl-agent">kea-ctrl-agent</primary>
|
---|
| 614 | </indexterm>
|
---|
| 615 | </listitem>
|
---|
| 616 | </varlistentry>
|
---|
| 617 | <varlistentry id="kea-dhcp4">
|
---|
| 618 | <term><command>kea-dhcp4</command></term>
|
---|
| 619 | <listitem>
|
---|
| 620 | <para>
|
---|
| 621 | The server daemon providing IPv4 addresses.
|
---|
| 622 | </para>
|
---|
| 623 | <indexterm zone="kea kea-dhcp4">
|
---|
| 624 | <primary sortas="b-kea-dhcp4">kea-dhcp4</primary>
|
---|
| 625 | </indexterm>
|
---|
| 626 | </listitem>
|
---|
| 627 | </varlistentry>
|
---|
| 628 | <varlistentry id="kea-dhcp6">
|
---|
| 629 | <term><command>kea-dhcp6</command></term>
|
---|
| 630 | <listitem>
|
---|
| 631 | <para>
|
---|
| 632 | The server daemon providing IPv6 addresses.
|
---|
| 633 | </para>
|
---|
| 634 | <indexterm zone="kea kea-dhcp6">
|
---|
| 635 | <primary sortas="b-kea-dhcp6">kea-dhcp6</primary>
|
---|
| 636 | </indexterm>
|
---|
| 637 | </listitem>
|
---|
| 638 | </varlistentry>
|
---|
| 639 | <varlistentry id="kea-dhcp-ddns">
|
---|
| 640 | <term><command>kea-dhcp-ddns</command></term>
|
---|
| 641 | <listitem>
|
---|
| 642 | <para>
|
---|
| 643 | The server daemon performing the dynamic DNS updates.
|
---|
| 644 | </para>
|
---|
| 645 | <indexterm zone="kea kea-dhcp-ddns">
|
---|
| 646 | <primary sortas="b-kea-dhcp-ddns">kea-dhcp-ddns</primary>
|
---|
| 647 | </indexterm>
|
---|
| 648 | </listitem>
|
---|
| 649 | </varlistentry>
|
---|
| 650 | <varlistentry id="kea-lfc">
|
---|
| 651 | <term><command>kea-lfc</command></term>
|
---|
| 652 | <listitem>
|
---|
| 653 | <para>
|
---|
| 654 | The kea-lfc service process removes redundant information
|
---|
| 655 | from the files used to provide persistent storage for the
|
---|
| 656 | memfile database backend. It is run by the Kea DHCP server.
|
---|
| 657 | </para>
|
---|
| 658 | <indexterm zone="kea kea-lfc">
|
---|
| 659 | <primary sortas="b-kea-lfc">kea-lfc</primary>
|
---|
| 660 | </indexterm>
|
---|
| 661 | </listitem>
|
---|
| 662 | </varlistentry>
|
---|
[0dcde6e] | 663 | <varlistentry id="keashell">
|
---|
| 664 | <term><command>keashell</command></term>
|
---|
| 665 | <listitem>
|
---|
| 666 | <para>
|
---|
| 667 | RESTful client to the <application>ISC Kea</application>
|
---|
| 668 | services.
|
---|
| 669 | </para>
|
---|
| 670 | <indexterm zone="kea keashell">
|
---|
| 671 | <primary sortas="b-keashell">keashell</primary>
|
---|
| 672 | </indexterm>
|
---|
| 673 | </listitem>
|
---|
| 674 | </varlistentry>
|
---|
[c2ab6f4] | 675 |
|
---|
| 676 | </variablelist>
|
---|
| 677 |
|
---|
| 678 | </sect2>
|
---|
| 679 |
|
---|
| 680 | </sect1>
|
---|