Skip to content

ansible role to setup Bind/Named DNS server with sane secure default.

License

Notifications You must be signed in to change notification settings

vsfomin/ansible-bind

 
 

Repository files navigation

Build Status - Master Build Status - Devel

Secure Bind ansible role

Ansible role to setup Bind/Named DNS server with sane secure default. Including

  • Secure template from Team Cymru template (http://www.cymru.com/Documents/secure-bind-template.html). Please note than separated internal/external views are not implemented currently.
  • DNSSEC for authentication,
  • RPZ to whitelist/blacklist entries
  • Malware domains list blackholed
  • Eventual integration with MISP RPZ export
  • Authoritative DNS (mostly for internal zones) Mostly as cache/forwarder but could be other roles.

Requirements & Dependencies

Ansible

It was tested on the following versions:

  • 2.0
  • 2.1
  • 2.2

Operating systems

Tested with Ubuntu 14.04 (bind 9.9.5), 16.04(9.10.3) and centos7(9.9.4)

Example Playbook

Just include this role in your list. For example

- host: all
  roles:
    - juju4.bind

Variables

Nothing specific for now.

Continuous integration

This role has a travis basic test (for github), more advanced with kitchen and also a Vagrantfile (test/vagrant).

Once you ensured all necessary roles are present, You can test with:

$ cd /path/to/roles/juju4.bind
$ kitchen verify
$ kitchen login

or

$ cd /path/to/roles/juju4.bind/test/vagrant
$ vagrant up
$ vagrant ssh

Troubleshooting & Known issues

License

BSD 2-clause

Thanks

About

ansible role to setup Bind/Named DNS server with sane secure default.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Ruby 73.4%
  • Shell 26.1%
  • Roff 0.5%