1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
|
.. ischooklib:: libdhcp_ddns_tuning.so
.. _hooks-ddns-tuning:
``libdhcp_ddns_tuning.so``: DDNS Tuning
=======================================
This hook library adds support for fine-tuning various DNS update aspects.
It currently supports procedural host-name generation and the ability to skip
performing DDNS updates for select clients.
.. note::
:ischooklib:`libdhcp_ddns_tuning.so` is available as a premium
hook library from ISC. Please visit https://www.isc.org/shop/ to purchase
the premium hook libraries, or contact us at https://www.isc.org/contact for
more information.
The library, which was added in Kea 2.1.5, can be loaded by the :iscman:`kea-dhcp4`
and :iscman:`kea-dhcp6` daemons by adding it to the ``hooks-libraries`` element of the
server's configuration:
.. code-block:: javascript
{
"hooks-libraries": [
{
"library": "/usr/local/lib/libdhcp_ddns_tuning.so",
"parameters": {
...
}
},
...
],
...
}
Procedural Host-Name Generation
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This hook library provides the ability to generate host names procedurally, based on
an expression. The expression can be defined globally in the hook parameters, using
`hostname-expr`. If defined globally, it applies to all hosts in all subnets. The
expressions can use all tokens defined in :ref:`classify`. An example of a global
expression is shown below:
.. code-block:: javascript
{
"hooks-libraries": [
{
"library": "/usr/local/lib/libdhcp_ddns_tuning.so",
"parameters": {
"hostname-expr": "'host-'+hexstring(pkt4.mac,'-')",
...
}
},
...
],
...
}
It is also possible to define this parameter in a subnet, using the user-context mechanism.
If defined at the subnet level, the expression applies to a specific subnet only. If the
subnet expression is defined as empty, ``""``, it suppresses (or disables) the use of a
global expression for that subnet. An example subnet expression is shown below:
.. code-block:: javascript
{
"subnet4": [{
"subnet": "192.0.2.0/24",
"pools": [{
"pool": "192.0.2.10 - 192.0.2.20"
} ],
// This is a subnet-specific user context.
"user-context": {
"ddns-tuning": {
"hostname-expr": "'guest-'+int8totext(substring(pkt4.yiaddr, 0,1))+'-' \
+int8totext(substring(pkt4.yiaddr, 1,2))+'-' \
+int8totext(substring(pkt4.yiaddr, 2,3))+'-' \
+int8totext(substring(pkt4.yiaddr, 3,4))"
},
"last-modified": "2017-09-04 13:32",
"description": "you can put anything you like here",
"phones": [ "x1234", "x2345" ],
"devices-registered": 42,
"billing": false
}
}],
...
}
.. note::
The expression value above uses a backslash, ``\``, to show line continuation. This is for
clarity only and is not valid JSON supported by Kea parsing. The actual value must
be expressed on a single line.
.. note::
Privacy should be taken into consideration when generating a host name. The host name
is usually inserted into the DNS, which is a public system. Exposing identifiers that
can be used to track devices, such as a MAC address, are usually a very bad idea.
The global expression example here used a MAC address for simplicity.
DHCPv4 Host-Name Generation
---------------------------
With this library installed, the behavior for :iscman:`kea-dhcp4` when forming host names in
response to a client query (e.g. DISCOVER, REQUEST) is as follows:
1. If a host name is supplied via a host reservation, use it with the DDNS
behavioral parameters to form the final host name. Go to step 4.
2. If the client supplied an FQDN option (option 81), use the domain name value
specified within it, with the DDNS behavioral parameters, to form the final
host name. Go to step 4.
3. If the client supplied a host-name option (option 12), use the host name specified
within it, with the DDNS behavioral parameters, to form the final host name.
4. If there is a ``ddns-tuning`` in-scope host-name expression (either global or subnet),
calculate the host name using the expression. If the calculated value is not a fully
qualified name and there is an in-scope ``ddns-qualifying-suffix``, append the suffix.
5. If the value calculated by the hook is not an empty string and is different than
the host name formed in steps 1 or 2, the calculated value becomes the
final host name.
DHCPv6 Host-Name Generation
---------------------------
With this library installed, the behavior for :iscman:`kea-dhcp6` when forming host names in
response to a client query (e.g. SOLICIT, REQUEST, RENEW, REBIND) is as follows:
1. If the client supplied an FQDN option (option 39), use the domain name value
specified within it, with the DDNS behavioral parameters, to form the final
host name. Go to step 4.
2. If the client did not supply an FQDN but ``ddns-replace-client-name`` is either
``always`` or ``when-not-present``, then calculate the final form of the host
name and use it to create an outbound FQDN. Go to step 4.
3. If there is no outbound FQDN at this point, client-name processing for this
packet stops. Without an outbound FQDN there is no way to communicate a host
name to the client.
4. If a host name is supplied via a host reservation, use it along with the DDNS
behavioral parameters to form the final host name; it supersedes the FQDN value
calculated in steps 1 or 2.
5. If there is a ``ddns-tuning`` in-scope host name expression (either global or subnet),
calculate the host name using the expression. If the calculated value is not a fully
qualified name and there is an in-scope ``ddns-qualifying-suffix``, append the suffix.
6. If the value calculated by the hook is not an empty string and is different than
the host name formed in steps 1 or 2, the calculated value becomes the
final host name.
Skipping DDNS Updates
~~~~~~~~~~~~~~~~~~~~~
:ischooklib:`libdhcp_ddns_tuning.so` also provides the ability to skip DDNS updates on a
per-client basis. The library recognizes a special client class, "SKIP_DDNS"; when a
client is matched to this class, the Kea servers (:iscman:`kea-dhcp4` and :iscman:`kea-dhcp6`) do not
send DDNS update requests (NCRs) to :iscman:`kea-dhcp-ddns`. A common use case would be
to skip DDNS updates for fixed-address host reservations. This is done easily by
simply assigning the class to the host reservation as shown below:
.. code-block:: javascript
{
"reservations": [
{
"hw-address": "01:02:03:04:05:06",
"ip-address": "192.0.2.1",
"client-classes": [ "SKIP_DDNS", "foo", "bar" ]
}]
}
The :ischooklib:`libdhcp_ddns_tuning.so` hook library notes the
presence of the ``"SKIP_DDNS"`` class in the
client's class list each time the client requests, renews, or releases its lease,
and instructs :iscman:`kea-dhcp4` to bypass sending DDNS updates. A similar workflow is
supported for :iscman:`kea-dhcp6`:
.. code-block:: javascript
{
"reservations": [
{
"duid": "01:02:03:04:05:06",
"ip-address": "2001:db8::1",
"client-classes": [ "SKIP_DDNS", "foo", "bar" ]
}]
}
Although "SKIP_DDNS" is a special class, it can be defined with a test
expression. Defining it as shown below would omit DDNS updates for all KNOWN
clients:
.. code-block:: javascript
{
"client-classes":[
{
"name": "SKIP_DDNS",
"test": "member('KNOWN')"
}]
}
.. note::
The :ischooklib:`libdhcp_ddns_tuning.so` hook library must be
loaded for the ``"SKIP_DDNS"`` class to have an effect.
|
