Search Results for he net ddns

EdgeRouter同时更新TunnelBroker和HE.NET DDNS

之前文章里TunnelBroker for EdgeRouter Lite提及TunnelBroker和He.net DDNS同时更新的解决方案，后来证实不是那么稳定。其实TunnelBroker.net里提供了解决方案。在TunnelBroker.net的Tunnel Details里，选择Advanced，最下边的一组配置是HE Dynamic DNS Settings。 Hostname填入HE.NET的DDNS域名，API Key填DDNS域名的更新key。然后修改EdgeRouter的配置：

delete service dns dynamic interface pppoe0 service dyndns 
set service dns dynamic interface pppoe0 service dyndns host-name TB_TUNNELID
set service dns dynamic interface pppoe0 service dyndns login TB_USER
set service dns dynamic interface pppoe0 service dyndns password  TB_PASS
set service dns dynamic interface pppoe0 service dyndns server ipv4.tunnelbroker.net

delete service dns dynamic interface pppoe0 service dyndns

set service dns dynamic interface pppoe0 service dyndns host-name TB_TUNNELID

set service dns dynamic interface pppoe0 service dyndns login TB_USER

set service dns dynamic interface pppoe0 service dyndns password TB_PASS

set service dns dynamic interface pppoe0 service dyndns server ipv4.tunnelbroker.net

Incoming search terms:he net ddnshe net dns Tunnel Brokertunnelbroker dynamic dnsLink to this post!

20分钟搭建一个自用的DDNS服务

08年的时候，在学校，花了点时间做了个ddns服务，不知道现在是否还活着，ddns.bitunion.org。当时的方案，powerdns + mysql + php ui，php ui是自己做的，简单地做了个校内邮箱的校验，使用了个简单的token机制来更新记录。这回，有个需求是需要做一个ttl < 10的ddns服务，之前所有域名都在dns.he.net上，最小ttl限制到了300，这样以来，更新的延迟特定场景下不够用。自用DDNS的需求里，域名不会被广泛知晓并使用，否则NS服务器的压力会是个问题。方案还是一样，powerdns + mysql，写了个最简单的http接口页面给ddclient用。服务器是 ubuntu 17.04，公网IP 1.2.3.4. 目标域名 xxx.ddns.sskaje.me 安装软件按下列命令安装必备软件，全默认

apt install  pdns-server pdns-tools pdns-backend-mysql

1	apt install pdns-server pdns-tools pdns-backend-mysql

配置powerdns 考虑到现在的linux服务器，本地53端口经常被占用，所以需要修改 /etc/powerdns/pdns.conf，指定监听的IP

local-address=1.2.3.4

1	local-address=1.2.3.4

配置zone和records 在sskaje.me的域名服务器上，添加NS记录 ddns.sskaje.me，指向IP 1.2.3.4。考虑到未来可能改IP，可以加一个A记录 ddns1.sskaje.me，指向 1.2.3.4，这样ddns.sskaje.me的NS设置成 ddns1.sskaje.me。创建zone

# pdnsutil create-zone ddns.sskaje.me
Jul 16 08:59:55 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
Creating empty zone 'ddns.sskaje.me'

# pdnsutil create-zone ddns.sskaje.me

Jul 16 08:59:55 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed

Creating empty zone 'ddns.sskaje.me'

更正SOA记录

# pdnsutil add-record ddns.sskaje.me @  SOA 2592000 "dns.sskaje.me. dns.sskaje.me. 1 10800 3600 604800 3600"
Jul 16 09:13:47 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
New rrset:
ddns.sskaje.me. IN SOA 3600 a.misconfigured.powerdns.server hostmaster.ddns.sskaje.me 1 10800 3600 604800 3600
ddns.sskaje.me. IN SOA 2592000 dns.sskaje.me dns.sskaje.me 1 10800 3600 604800 3600

# pdnsutil add-record ddns.sskaje.me @ SOA 2592000 "dns.sskaje.me. dns.sskaje.me. 1 10800 3600 604800 3600"

Jul 16 09:13:47 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed

New rrset:

ddns.sskaje.me. IN SOA 3600 a.misconfigured.powerdns.server hostmaster.ddns.sskaje.me 1 10800 3600 604800 3600

ddns.sskaje.me. IN SOA 2592000 dns.sskaje.me dns.sskaje.me 1 10800 3600 604800 3600

添加 xxx.ddns.sskaje.me，设置ttl=10

# pdnsutil add-record ddns.sskaje.me xxx A 10 127.0.0.1
Jul 16 09:14:55 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed
New rrset:
xxx.ddns.sskaje.me. IN A 10 127.0.0.1

# pdnsutil add-record ddns.sskaje.me xxx A 10 127.0.0.1

Jul 16 09:14:55 [bindbackend] Done parsing domains, 0 rejected, 0 new, 0 removed

New rrset:

xxx.ddns.sskaje.me. IN A 10 127.0.0.1

简单的更新脚本 DynDNS的更新接口参数类似：

/nic/update?system=dyndns&hostname=xxx.ddns.sskaje.me&myip=4.3.2.1

1	/nic/update?system=dyndns&hostname=xxx.ddns.sskaje.me&myip=4.3.2.1

认证使用 http basic auth 完成的。所以一个简单的服务端脚本

<?php

$auth = [
    'xxx.ddns.sskaje.me' =>  'This.15.p4ssw0rd',
];


if (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW'])) {
    die('badauth');
}

if (!isset($auth[$_SERVER['PHP_AUTH_USER']])) {
    die('badauth');
}

if ($auth[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW']) {
    die('badauth');
}

if (!isset($_GET['hostname'])) {
    die('badauth');
}

if ($_GET['hostname'] != $_SERVER['PHP_AUTH_USER']) {
    die('badauth');
}

$db = new mysqli('localhost', 'root', '123123123', 'pdns');
$db->set_charset('utf8');
try {
    $db->autocommit(0);

    $result = $db->query("SELECT * FROM records WHERE name='{$_SERVER['PHP_AUTH_USER']}' FOR UPDATE ");

    if (!$result->num_rows) {
        throw new Exception('nohost');
    }

    $record = $result->fetch_assoc();
    if ($record['type'] != 'A') {
        throw new Exception('nohost');
    }

    if (!isset($_GET['myip'])) {
        $ip = get_client_ip();
    } else {
        $ip = long2ip(ip2long($_GET['myip']));
    }

    if ($ip == $record['content']) {
        throw new Exception('nochg');
    }

    $db->query("UPDATE records SET content='{$ip}' WHERE id={$record['id']}");

    $db->commit();

    echo "good {$ip}\n";

} catch (Exception $e) {
    $db->rollback();

    echo $e->getMessage() . "\n";
} finally {
    $db->close();
}

function get_client_ip()
{
    if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {
        return $_SERVER['HTTP_CF_CONNECTING_IP'];
    }

    return $_SERVER['REMOTE_ADDR'];
}

<?php

$auth = [

'xxx.ddns.sskaje.me' => 'This.15.p4ssw0rd',

];

if (!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW'])) {

die('badauth');

}

if (!isset($auth[$_SERVER['PHP_AUTH_USER']])) {

die('badauth');

}

if ($auth[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW']) {

die('badauth');

}

if (!isset($_GET['hostname'])) {

die('badauth');

}

if ($_GET['hostname'] != $_SERVER['PHP_AUTH_USER']) {

die('badauth');

}

$db = new mysqli('localhost', 'root', '123123123', 'pdns');

$db->set_charset('utf8');

try {

$db->autocommit(0);

$result = $db->query("SELECT * FROM records WHERE name='{$_SERVER['PHP_AUTH_USER']}' FOR UPDATE ");

if (!$result->num_rows) {

throw new Exception('nohost');

}

$record = $result->fetch_assoc();

if ($record['type'] != 'A') {

throw new Exception('nohost');

}

if (!isset($_GET['myip'])) {

$ip = get_client_ip();

} else {

$ip = long2ip(ip2long($_GET['myip']));

}

if ($ip == $record['content']) {

throw new Exception('nochg');

}

$db->query("UPDATE records SET content='{$ip}' WHERE id={$record['id']}");

$db->commit();

echo "good {$ip}\n";

} catch (Exception $e) {

$db->rollback();

echo $e->getMessage() . "\n";

} finally {

$db->close();

}

function get_client_ip()

{

if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) {

return $_SERVER['HTTP_CF_CONNECTING_IP'];

}

return $_SERVER['REMOTE_ADDR'];

}

Incoming search terms:ddns服务器搭建ubnt … Continue reading “20分钟搭建一个自用的DDNS服务”

HE.net Dynamic DNS on Ubiquiti Router

HE.net provides free DDNS service, compatible with DynDNS’s update format. Link: Dynamic DNS on HE.net. I’m using Ubiquiti EdgeRouter Lite, Dynamic DNS support can be found from web GUI console, but the server address is not configurable. Here is a copy of my config:

     dns {
         dynamic {
             interface pppoe0 {
                 service dyndns {
                     host-name ddns.record.my.domain
                     login ddns.record.my.domain
                     password [PASSWORD]
                     server dyn.dns.he.net
                 }
             }
         }
    }

dns {

dynamic {

interface pppoe0 {

service dyndns {

host-name ddns.record.my.domain

password [PASSWORD]

server dyn.dns.he.net

}

You can also configure from CLI.

ubnt@ubnt:~$ configure 
[edit]
ubnt@ubnt# edit  service dns dynamic  interface pppoe0 
[edit service dns dynamic interface pppoe0]
ubnt@ubnt# set service dyndns 
ubnt@ubnt# set service dyndns host-name ddns.record.my.domain
ubnt@ubnt# set service dyndns login ddns.record.my.domain
ubnt@ubnt# set service dyndns password PASSWORD
ubnt@ubnt# set service dyndns server dyn.dns.he.net
ubnt@ubnt# commit
ubnt@ubnt# save

ubnt@ubnt:~$ configure

[edit]

ubnt@ubnt# edit service dns dynamic interface pppoe0

[edit service dns dynamic interface pppoe0]

ubnt@ubnt# set service dyndns

ubnt@ubnt# set service dyndns host-name ddns.record.my.domain

ubnt@ubnt# set service dyndns login ddns.record.my.domain

ubnt@ubnt# set service dyndns password PASSWORD

ubnt@ubnt# set service dyndns server dyn.dns.he.net

ubnt@ubnt# commit

ubnt@ubnt# save

1 Pick the … Continue reading “HE.net Dynamic DNS on Ubiquiti Router”

Dynamic DNS on HE.net

I was using ZoneEdit and set my ddns there like:

/usr/bin/curl  --user 'Username:Password' 'http://dynamic.zoneedit.com/auth/dynamic.html?host=DomainName'

1	/usr/bin/curl --user 'Username:Password' 'http://dynamic.zoneedit.com/auth/dynamic.html?host=DomainName'

But it’s worse than it was. The HE.net, hurricane electronic, was known by its IPv6 tunnel, also providing free dynamic dns service, no monthly reactivation required like no-ip. https://dns.he.net/ Register and Sign in, add a domain and add an A record, check the Enable … Continue reading “Dynamic DNS on HE.net”

Azure Site-to-Site VPN with Dynamic Client IP

以前自己用 strongswan 等软件配 IPSec site-to-site 的时候，可以直接指定客户端的 IP 是 0.0.0.0，Azure 的 site-to-site IPSec VPN 必须要指定客户端 IP。 PowerShell 爱好者可以参考 https://www.hayesjupe.com/using-azure-rm-site-to-site-vpn-with-a-dynamic-ip/ 这篇文章。我还是习惯用 Linux，于是使用 Azure CLI 来解决这个问题。在 VPN 的 Virtual Network 里放置一台 Linux 虚拟机。按照上述连接里的说明安装软件。接下来开始操作。 1 登录 SSH 登录虚拟机后，执行命令，并按照输出，用浏览器登录 Azure 账号，完成认证。

$ az login
To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXX to authenticate.

1 2	$ az login To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXX to authenticate.

如果是中国区 Azure，先需要设置服务器

$ az cloud set -n AzureChinaCloud
Switched active cloud to 'AzureChinaCloud'.
Use 'az login' to log in to this cloud.
Use 'az account set' to set the active subscription.

$ az cloud set -n AzureChinaCloud

Switched active cloud to 'AzureChinaCloud'.

Use 'az login' to log in to this cloud.

Use 'az account set' to set the active subscription.

如果需要切换回海外版本

$ az cloud set -n AzureCloud

1	$ az cloud set -n AzureCloud

2 添加更新服务参考 DDNS 的玩法，让客户端定期更新IP。服务端可以简单地将数据记录到数据库、文件、或者任何地方，配置一个 cron 来执行更新检测和 Gateway IP 更新。 3 … Continue reading “Azure Site-to-Site VPN with Dynamic Client IP”