Dnsmasq TestNetwork - Revision history

Busk at 19:25, 10 October 2020

2020-10-10T19:25:53Z

Busk at 19:16, 10 October 2020

2020-10-10T19:16:35Z

Busk at 19:14, 10 October 2020

2020-10-10T19:14:36Z

Busk at 18:59, 10 October 2020

2020-10-10T18:59:14Z

Busk at 17:07, 10 October 2020

2020-10-10T17:07:16Z

Busk at 17:04, 10 October 2020

2020-10-10T17:04:23Z

Busk at 17:02, 10 October 2020

2020-10-10T17:02:36Z

Busk at 16:50, 10 October 2020

2020-10-10T16:50:27Z

Busk at 16:41, 10 October 2020

2020-10-10T16:41:08Z

Busk: Created page with "# ip link add name j type bridge # ip link set j up lxc profile copy default jclients # Then edit eth0 like below ``` config: {} description: Test j dhcp clients devices:..."

2020-10-10T16:40:25Z

Created page with "# ip link add name j type bridge # ip link set j up lxc profile copy default jclients # Then edit eth0 like below ``` config: {} description: Test j dhcp clients devices:..."

New page

# ip link add name j type bridge
# ip link set j up

lxc profile copy default jclients # Then edit eth0 like below
```
config: {}
description: Test j dhcp clients
devices:
eth0:
nictype: bridged
parent: j
type: nic
root:
path: /
pool: dir
type: disk
name: jclients
```

lxc profile copy default jfw # Then edit to add eth1 like below
```
config: {}
description: Test j firewall with 2 nics
devices:
eth0:
nictype: bridged
parent: lxdbr0
type: nic
eth1:
nictype: bridged
parent: j
type: nic
root:
path: /
pool: dir
type: disk
name: jfw
```

Create containers
```
lxc launch ubuntu:20.04 jfw -p jfw
lxc launch ubuntu:20.04 jclient1 -p jclients
```

# Disable resolved
```
sudo systemctl disable systemd-resolved.service
sudo systemctl stop systemd-resolved
rm /etc/resolv.conf
echo "nameserver <mynamserver>" > /etc/resolv.conf
```

apt install dnsmasq

/etc/dnsmasq.conf
```
dhcp-option=15,"test.uvoo.io"
domain=test.uvoo.io
cache-size=10000 # df 150
except-interface=eth0
bind-interfaces
expand-hosts
dns-forward-max=1100
dhcp-option=3,0.0.0.0
dhcp-option=6,0.0.0.0
dhcp-range=eth1,192.168.200.100,192.168.200.200,12h # You don't need to specify interface as it should pick it up from int ip
```

restart service
```
systemclt restart dnsmasq
```

Sniff traffic if wanted
```
sudo tcpdump -nnpli j
```

Alternate container create/apply
```
lxc init ubuntu:20.04 jfw
lxc init ubuntu:20.04 jclient1
lxc profile apply jfw jfw
lxc profile apply jclient1 jclients
```

# Start containers
```
lxc start jfw
lxc start jclient1
```

@@ Line 144: / Line 144: @@
 // https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-14-04
 // https://docstore.mik.ua/orelly/networking_2ndEd/dns/ch10_05.htm
 acl goodclients {
 .0.200.0/24;

@@ Line 143: / Line 143: @@
 ```
 // https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-14-04
 acl goodclients {
 .0.200.0/24;

@@ Line 134: / Line 134: @@
+         }
+}
 ```

← Older revision		Revision as of 17:04, 10 October 2020
Line 113:		Line 113:
	lxc start jclient1		lxc start jclient1
	```		```
		+
		+	# Ref
		+	- https://www.tecmint.com/setup-a-dns-dhcp-server-using-dnsmasq-on-centos-rhel/

@@ Line 98: / Line 98: @@
 systemclt restart dnsmasq
 ```
 Sniff traffic if wanted

@@ Line 84: / Line 84: @@
 dhcp-option=6,0.0.0.0
 dhcp-range=eth1,192.168.200.100,192.168.200.200,12h # You don't need to specify interface as it should pick it up from int ip
 ```

@@ Line 54: / Line 54: @@
 rm /etc/resolv.conf
 echo "nameserver <mynamserver>" > /etc/resolv.conf
 ```

@@ Line 1: / Line 1: @@
-# ip link add name j type bridge
+Add a bridge on host for private network communications
-# ip link set j up
+```
 ip link add name j type bridge
 lxc profile copy default jclients # Then edit eth0 like below