diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf index ad6b06da76..fc11e5ac07 100644 --- a/roles/dns/files/named.conf +++ b/roles/dns/files/named.conf @@ -23,6 +23,7 @@ acl "everyone" { 0.0.0.0/0; ::0/0; }; acl "ns_redhat" { 66.187.233.210; 209.132.183.2; 66.187.229.10; }; // acl "phx2net" { 10.4.124.128/25; 10.5.78.0/24; 10.5.79.0/24; 10.5.125.0/24; 10.5.126.0/24; 10.5.127.0/24; }; +acl "qanet" { 10.5.124.128/25 10.5.131.0/24 }; acl "rh-slaves" { 172.16.52.28; 10.11.255.27; 10.11.255.3; }; acl "rh" { 10.0.0.0/8; }; // @@ -227,6 +228,133 @@ view "PHX2" { include "/etc/named/zones.conf"; }; +view "QA" { + match-clients { 10.5.123.128/25; 10.5.131.0/24; }; + allow-recursion { localhost; qanet; rh-slaves; rh; }; + recursion yes; + // no rate-limit on internal requests + rate-limit { + exempt-clients { qanet; }; + }; + + zone "beaker-project.org" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "88.5.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "4.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "5.10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "10.in-addr.arpa" { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "186.132.209.in-addr.arpa." { + type forward; + forward only; + forwarders { 10.5.26.20; 10.5.26.21; }; + }; + + zone "qa.fedoraproject.org" { + type master; + file "/var/named/master/built/qa.fedoraproject.org"; + }; + + zone "phx2.fedoraproject.org" { + type master; + file "/var/named/master/built/phx2.fedoraproject.org"; + }; + + zone "mgmt.fedoraproject.org" { + type master; + file "/var/named/master/built/mgmt.fedoraproject.org"; + }; + + zone "arm.fedoraproject.org" { + type master; + file "/var/named/master/built/arm.fedoraproject.org"; + }; + + zone "78.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/78.5.10.in-addr.arpa"; + }; + + zone "79.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/79.5.10.in-addr.arpa"; + }; + + zone "124.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/124.5.10.in-addr.arpa"; + }; + + zone "125.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/125.5.10.in-addr.arpa"; + }; + + zone "126.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/126.5.10.in-addr.arpa"; + }; + + zone "127.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/127.5.10.in-addr.arpa"; + }; + + zone "128.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/128.5.10.in-addr.arpa"; + }; + + zone "130.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/130.5.10.in-addr.arpa"; + }; + + zone "131.5.10.in-addr.arpa" { + type master; + file "/var/named/master/built/131.5.10.in-addr.arpa"; + }; + + + zone "fedoraproject.org" { + type master; + file "/var/named/master/built/QA/fedoraproject.org.signed"; + }; + zone "cloud.fedoraproject.org" { + type master; + file "/var/named/master/built/QA/cloud.fedoraproject.org.signed"; + }; + zone "getfedora.org" { + type master; + file "/var/named/master/built/QA/getfedora.org.signed"; + }; + + include "/etc/named/zones.conf"; +}; + // The zones view "NA" {