Dns: introduce dnsdist as resolver, use it for all VMs

Author: gmelikov

etc/dnsdist/dnsdist-private.conf

@@ -0,0 +1,13 @@
+-- disable security status polling via DNS
+setSecurityPollSuffix("")
+
+setLocal("10.20.0.2:53")
+--Public DNS
+newServer({address="1.1.1.1"})
+newServer({address="8.8.8.8"})
+pc = newPacketCache(10000, {maxTTL=86400, minTTL=0, temporaryFailureTTL=60, staleTTL=60, dontAge=false})
+getPool(""):setCache(pc)
+
+--Private DNS
+newServer({address="127.0.0.1:5300", pool="privatedns", healthCheckMode="up"})
+addAction({'local.genesis-core.tech'}, PoolAction("privatedns"))

etc/dnsdist/dnsdist-public.conf

@@ -0,0 +1,14 @@
+-- disable security status polling via DNS
+setSecurityPollSuffix("")
+
+setLocal("0.0.0.0:5333")
+
+--Private DNS
+newServer({address="127.0.0.1:5300", pool="privatedns", healthCheckMode="up"})
+--Allow TXT only
+smn = newSuffixMatchNode()
+smn:add(newDNSName("pdns.platform.genesis-core.tech."));
+-- NS
+addAction(QNameRule("pdns.platform.genesis-core.tech"), QPSPoolAction(100, "privatedns"))
+-- DNS01 acme challenges
+addAction(AndRule{SuffixMatchNodeRule(smn), QTypeRule(16), RegexRule("_acme-challenge\\..*")}, QPSPoolAction(100, "privatedns"))

genesis/images/install.sh

@@ -37,7 +37,7 @@ SDK_DEV_MODE=$([ -d "$DEV_SDK_PATH" ] && echo "true" || echo "false")
 
 # Install packages
 sudo apt update
-sudo apt install postgresql libev-dev libvirt-dev \
+sudo apt install yq postgresql libev-dev libvirt-dev \
     tftpd-hpa isc-dhcp-server -y
 
 # Useful for all-in-one-vm tests
@@ -119,9 +119,23 @@ sudo systemctl enable gc-user-api gc-orch-api gc-status-api gc-gservice \
 # Prepare DNSaaS
 
 # Install packages
-sudo apt install pdns-backend-pgsql pdns-server -y
+sudo apt install pdns-backend-pgsql pdns-server dnsdist -y
 
+#pdns
 sudo rm /etc/powerdns/pdns.d/bind.conf
 sudo cp "$GC_PATH/etc/powerdns/genesis.conf" /etc/powerdns/pdns.d/genesis.conf
-
 sudo systemctl enable pdns
+
+#dnsdist
+# EDIT private ip here
+sudo cp "$GC_PATH/etc/dnsdist/dnsdist-private.conf" /etc/dnsdist/dnsdist-private.conf
+sudo systemctl enable dnsdist@private
+
+# Optional, only for public resolving, for ex. ACME dns01 certs challenge
+sudo cp "$GC_PATH/etc/dnsdist/dnsdist-public.conf" /etc/dnsdist/dnsdist-public.conf
+sudo systemctl enable dnsdist@public
+
+# Set local IP where needed
+LOCAL_IP=$(cat "$GC_PATH/genesis/images/startup_cfg.yaml" | yq '.startup_entities.core_ip' -r)
+echo "DNS=${LOCAL_IP}" >> /etc/systemd/resolved.conf
+sed -i 's/setLocal("10.20.0.2:53")/setLocal("'"${LOCAL_IP}"':53")/' /etc/dnsdist/dnsdist-private.conf

genesis/images/startup_cfg.yaml

@@ -1,4 +1,6 @@
 startup_entities:
+  core_ip: "10.20.0.2"
+  domain: "local.genesis-core.tech"
   machine_pools:
     - uuid: "2bd17956-600b-4beb-8ddd-9fc4856262e6"
       name: "default-hw-pool"

genesis_core/cmd/bootstrap.py

@@ -25,6 +25,7 @@
 from restalchemy.common import config_opts as ra_config_opts
 
 from genesis_core.common import config
+from genesis_core.user_api.dns.dm import models as dns_models
 from genesis_core.node.dm import models
 from genesis_core.common import constants as c
 
@@ -77,6 +78,8 @@ def _apply_startup_db():
             ports = subnet.pop("ports", [])
             subnet_project_id = subnet.pop("project_id", net_project_id)
             subnet["project_id"] = subnet_project_id
+            if startup_entities.get("domain"):
+                subnet["dns_servers"] = [startup_entities["core_ip"]]
             subnet = models.Subnet.restore_from_simple_view(**subnet)
             subnet.network = network.uuid
             try:
@@ -109,6 +112,22 @@ def _apply_startup_db():
         else:
             LOG.info("Created machine pool %s", pool.uuid)
 
+    # Dns
+    if startup_entities.get("domain"):
+        zone = dns_models.Domain(name=startup_entities["domain"])
+        zone.insert()
+
+        core_record = dns_models.Record(
+            domain=zone,
+            ttl=300,
+            type="A",
+            record=dns_models.ARecord(
+                name="core",
+                address=startup_entities["core_ip"],
+            ),
+        )
+        core_record.insert()
+
 
 def main() -> None:
     # Parse config