From owner-freebsd-net@freebsd.org Tue Jun 16 15:19:02 2020 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E514533D4EF for ; Tue, 16 Jun 2020 15:19:02 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 49mX0k5DQdz48Ly for ; Tue, 16 Jun 2020 15:19:02 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: by mailman.nyi.freebsd.org (Postfix) id B1B2F33D4EE; Tue, 16 Jun 2020 15:19:02 +0000 (UTC) Delivered-To: net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B178433D79A for ; Tue, 16 Jun 2020 15:19:02 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 49mX0j3Y0Mz48GG; Tue, 16 Jun 2020 15:19:01 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id 05GFIxTQ081240; Tue, 16 Jun 2020 08:18:59 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id 05GFIxQV081239; Tue, 16 Jun 2020 08:18:59 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <202006161518.05GFIxQV081239@gndrsh.dnsmgr.net> Subject: Re: unbound and (isc) dhcpd startup order In-Reply-To: <5d4048a8-f643-2fc8-bcd5-35e2d6b1f996@madpilot.net> To: Guido Falsi Date: Tue, 16 Jun 2020 08:18:59 -0700 (PDT) CC: Andriy Gapon , Eugene Grosbein , net@freebsd.org X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 49mX0j3Y0Mz48GG X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of freebsd-rwg@gndrsh.dnsmgr.net has no SPF policy when checking 69.59.192.140) smtp.mailfrom=freebsd-rwg@gndrsh.dnsmgr.net X-Spamd-Result: default: False [0.43 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.40)[-0.405]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-0.23)[-0.235]; NEURAL_SPAM_LONG(0.17)[0.172]; R_SPF_NA(0.00)[no SPF record]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MIME_TRACE(0.00)[0:+]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2020 15:19:03 -0000 > On 15/06/20 14:47, Andriy Gapon wrote: > > On 15/06/2020 14:48, Eugene Grosbein wrote: > >> 15.06.2020 13:10, Andriy Gapon wrote: > >> > >>> I am configuring a small LAN -- mostly a gateway / router for it -- and I am > >>> using unbound for a local DNS and isc-dhcp44-server for DHCP. > >>> I have a few hosts with static IP addresses (for various reasons). > >>> So, in unbound.conf I have an entry like > >>> local-data: "hipster.home.arpa. IN A 192.168.0.222" > >> > >> Consider using /etc/hosts in addition to DNS to solve chicken/egg problem. > >> > >> > > > > Having the same IP in more than one place (on the router) is the thing that I'd > > like to avoid in the first place. Otherwise, there is no problem putting it in > > hdcpd.conf. > > > > A secondary DNS server could also help, unless both are rebooted at the > same time. Defanitly, that is one solution, but it also has issues like now I need NETWORKING and ROUTING and FIREWALL code all working before I might be able to access that "remote" DNS server. This is one of the things that has lead me to manage systems in a way that I can almost always boot anything with the network disconected and it still comes up with a valid and operation state. Sometimes that leads to duplicate IP information stored in various config files. When possible managing those configuraitons via ansible or other CM system that can pull the data from dns and build the config files minimizes the work to keep it all up to date. > -- > Guido Falsi -- Rod Grimes rgrimes@freebsd.org