{"id":83908,"date":"2020-06-03T19:42:59","date_gmt":"2020-06-03T17:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali"},"modified":"2020-12-21T09:35:04","modified_gmt":"2020-12-21T07:35:04","slug":"mikrotik-split-dns-oni-eto-sdelali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","title":{"rendered":"Mikrotik split-dns: lo lograron","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

No pasaron ni 10 a\u00f1os desde que los desarrolladores de RoS (en la versi\u00f3n estable 6.47) a\u00f1adieron la funcionalidad que permite redirigir las solicitudes DNS de acuerdo con reglas espec\u00edficas. Antes, era necesario recurrir a reglas de Layer-7 en el cortafuegos, pero ahora se hace de manera simple y elegante:<\/p>\n

\/ip dns static\nadd forward-to=192.168.88.3 regexp=\".*\\.test1\\.localdomain\" type=FWD\nadd forward-to=192.168.88.56 regexp=\".*\\.test2\\.localdomain\" type=FWD\n<\/code><\/pre>\n
\u00a1No hay l\u00edmites para mi felicidad!
\n<\/a><\/noindex><\/p>\n
\u00bfQu\u00e9 consecuencias tiene esto para nosotros?<\/h2>\n
Al menos, nos libramos de extra\u00f1as construcciones con NAT como esta:<\/p>\n
\n\/ip firewall layer7-protocol\nadd comment=\"DNS Nat contoso.com\" name=contoso.com regexp=\"\\x07contoso\\x03com\"\n\/ip firewall mangle\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=udp\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=tcp\n\/ip firewall nat\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=udp to-addresses=192.0.2.15\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=tcp to-addresses=192.0.2.15\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=udp\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=tcp\n<\/code><\/pre>\n
Y esto no es todo, ahora se pueden escribir varias servidores<\/a> redirecciones, lo que ayudar\u00e1 a implementar la conmutaci\u00f3n por error de DNS.
\nEl procesamiento inteligente de DNS permitir\u00e1 iniciar la implementaci\u00f3n de IPv6 en la red de la empresa. Antes no lo hab\u00eda hecho, la raz\u00f3n era que necesitaba resolver varios nombres DNS a direcciones locales, y en IPv6 esto no se pod\u00eda hacer sin medidas bastante razonables.<\/p>\n
Fuente: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 Layer-7 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 firewall, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0438\u0437\u044f\u0449\u043d\u043e: \/ip dns static add forward-to=192.168.88.3 regexp=».*\\.test1\\.localdomain» type=FWD add forward-to=192.168.88.56 regexp=».*\\.test2\\.localdomain» type=FWD \u041c\u043e\u0435\u043c\u0443 \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0435\u043b\u0430! […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-83908","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mikrotik split-dns: lo lograron | ProHoster","description":"No pasaron ni 10 a\u00f1os desde que los desarrolladores de RoS (en la versi\u00f3n estable 6.47) a\u00f1adieron la funcionalidad que permite redirigir las solicitudes DNS de acuerdo con reglas espec\u00edficas.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mikrotik split-dns: \u043e\u043d\u0438 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u0438 | ProHoster","og:description":"\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/es\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-03T17:42:59+00:00","article:modified_time":"2020-12-21T07:35:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83908","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:26","updated":"2026-02-09 16:50:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/83908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=83908"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/83908\/revisions"}],"predecessor-version":[{"id":158746,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/83908\/revisions\/158746"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=83908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=83908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=83908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}