[hipl-users] Re: Using DNS with HIPL
- From: Robert Moskowitz <rgm@xxxxxxxxxxxxxxx>
- To: hipl-users@xxxxxxxxxxxxx
- Date: Tue, 25 Nov 2008 09:54:01 -0500
Oleg Ponomarev wrote:
Greetings! On Tue, 25 Nov 2008, Robert Moskowitz wrote:
I used to add HIP records like this:
hipl--main--2.6/tools/parse-key-3.py felwood < /etc/hip/hip_host_rsa_key_pub.pub
It took me a bit to figure this all out. When I ran the above, I got a
bunch of stuff to the terminal window.
then copy-paste line (example below) starting with 9BIND to my zone file
felwood IN TYPE55 \# 152 (
100200842001001d392ea4502cd375e16098810403010001c94047ab10095f0d73ed3cc7f51777d64ef8092d45eddcf2841743f3b577cb4707a80b642c3c0272788e621400a279eada042cf90b4a6d8bc343c8f8ae24b9f936b31bba00197a2007b2ecdaf67bc6796a78e5dc726824b6a7eb9647d25389e313415518144520d55f2f5c7898e9af2936679c41dad9bc98b3401ad4cd154661
)
Then I added a > dns.1 to capture all that output to dns.1 which I then
opened in gedit. Now in gedit, I am able to see that there were only 8
lines of output and the last starts with 9BIND, and that is what you are
talking about above.
So once I add this TYPE55 entry, what uses it? Does dnsproxy grab it and
pass it inwards if I run an application with hipconf run normal myv6app?
It gives less headache than patching & building BIND every time, IMHO.
Unpatched dig shows it like this:
;; ANSWER SECTION:
felwood.infrahip.net. 86400 IN A 193.167.187.130
felwood.infrahip.net. 86400 IN AAAA 2001:708:140:220::3
felwood.infrahip.net. 86400 IN TYPE55 \# 152
100200842001001D392EA4502CD375E16098810403010001C94047AB
10095F0D73ED3CC7F51777D64EF8092D45EDDCF2841743F3B577CB47
07A80B642C3C0272788E621400A279EADA042CF90B4A6D8BC343C8F8
AE24B9F936B31BBA00197A2007B2ECDAF67BC6796A78E5DC726824B6
A7EB9647D25389E313415518144520D55F2F5C7898E9AF2936679C41
DAD9BC98B3401AD4CD154661
(Somebody else hopefully will clarify the rest)
Would I just provide some LSI in an A record, say 10.0.0.100?
I seem to recall a patched BIND to support HITs in DNS.
Then there is point 7 in ch13 about putting AAAA records in DNS. I have my
own server running, I can put up AAAA records for say target.htt. I could try
Opportunistic mode with this, or is there someway to also store the HIT?
There is the comment in ch13 about no HI support in DNS, but then there is
ch28 about formatting HIs to store in BIND9. Oh, I am running BIND 9.3.4.
So how do I get away from using /etc/hosts and /etc/hip/hosts?
Or will I still use /etc/hip/hosts with the IPv6 records in DNS?
How do I handle LSIs and can DNSPROXY wedge into this to help as well?
Other related posts:
