Alkaloid SCAN BIND9 Setup

From Docupedia

Written By: Steve Ayotte

Date: 10/3/2007

Overview

Members of the Alkaloid SCAN who wish to maintain their own DNS domain must have a DNS server which satisfies a few requirements. Namely:

  1. Private SCAN IP addresses must be resolvable to all members of the SCAN
  2. Private SCAN IP addresses must not be resolvable to non-members of the SCAN
  3. (future projection) RR (resource record) entries for various SCAN services must be provided by the DNS server

I have set up a server satisfying these (first two) requirements using the BIND9 software package. I placed the following additional requirements on my installation:

  1. Updates to the domain must be achievable using the 'nsupdate' utility, for administrator sanity and also integration with DHCP
  2. Master/slave server setups must be achievable for additional security and flexibility in performing maintenance

I will document the steps I took to set this up below.