Updating Network DNS Servers using CLI

Follow

Demitri

• April 16, 2021 08:17

What is the safest way to update the DNS Server(s) used by LAN or any other network without having to reboot Firewalla Gold? 

 

Context: 

I have a Traffic Manager on Azure that has multiple DNS Endpoints. The Traffic Manager does not have a public or a private profile as it is a DNS-based load balancer. 

Querying the FQDN name of the Traffic Manager returns the best available endpoint--in my case, the best available DNS Server--based on the chosen traffic routing method. 

 

Goal: 

 Automatically update Firewalla DNS Server in conf files(s) when the FDQN of the Traffic Manager returns an IP different from the one specified. 

 

In order for me to automate this process, I'd appreciate it if you can advise which conf file(s) exactly must I update. 

0

• 

  Firewalla

  • April 16, 2021 16:47

  Does this mean your DNS server is dynamic?  If it is, we do not have such capability to assign DNS this way, it has to be provisioned per LAN from the app

  0

  Comment actions Permalink
• 

  Demitri

  • April 16, 2021 18:27

  I understand. If I’m to script it myself, which config file should I update?

  0

  Comment actions Permalink
• 

  Firewalla

  • April 16, 2021 18:33

  It will be hard to script on the box.  The reasons is, there are a lot of code the checks for integrity of the box (configurations), and if anything that's off, it will reset what you have put in. 

  My advice is, if you can script, you can probably install dnsmasq (or like) in a docker container like pi-hole, and then point DNS service from firewalla to the container.  And inside the container, you can script to dynamically change your DNS servers with dnsmasq.   This will give you the best of both worlds, and you don't have to run into a risk of the system code change and break your implementation 

  0

  Comment actions Permalink
• 

  Demitri

  • April 17, 2021 02:46

  Awesome! Will do. Appreciate your insights.

  0

  Comment actions Permalink

Please sign in to leave a comment.