{"id":83908,"date":"2020-06-03T19:42:59","date_gmt":"2020-06-03T17:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali"},"modified":"2020-12-21T09:35:04","modified_gmt":"2020-12-21T07:35:04","slug":"mikrotik-split-dns-oni-eto-sdelali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","title":{"rendered":"Mikrotik split-dns: ce l'hanno fatta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Non sono trascorsi nemmeno 10 anni da quando gli sviluppatori di RoS (nella versione stabile 6.47) hanno aggiunto una funzionalit\u00e0 che consente di reindirizzare le richieste DNS secondo regole specifiche. Se prima dovevamo districarci con le regole Layer-7 nel firewall, ora \u00e8 tutto molto semplice ed elegante.<\/p>\n

\/ip dns static\nadd forward-to=192.168.88.3 regexp=\".*\\.test1\\.localdomain\" type=FWD\nadd forward-to=192.168.88.56 regexp=\".*\\.test2\\.localdomain\" type=FWD\n<\/code><\/pre>\n
La mia gioia non ha limiti!
\n<\/a><\/noindex><\/p>\n
Cosa comporta per noi?<\/h2>\n
Almeno, ci liberiamo di strane configurazioni con NAT simili a questa:<\/p>\n
\n\/ip firewall layer7-protocol\nadd comment=\"DNS Nat contoso.com\" name=contoso.com regexp=\"\\x07contoso\\x03com\"\n\/ip firewall mangle\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=udp\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=tcp\n\/ip firewall nat\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=udp to-addresses=192.0.2.15\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=tcp to-addresses=192.0.2.15\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=udp\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=tcp\n<\/code><\/pre>\n
E non \u00e8 tutto, ora \u00e8 possibile specificare pi\u00f9 server<\/a> inoltri, il che aiuter\u00e0 a realizzare il failover DNS.
\nL'elaborazione intelligente di DNS permetter\u00e0 di avviare l'implementazione di IPv6 nella rete dell'azienda. Prima non lo avevo fatto, il motivo \u00e8 che dovevo risolvere diversi nomi DNS in indirizzi locali, e con IPv6 non era fattibile senza alcune soluzioni piuttosto complicate.<\/p>\n
Fonte: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 Layer-7 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 firewall, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0438\u0437\u044f\u0449\u043d\u043e: \/ip dns static add forward-to=192.168.88.3 regexp=».*\\.test1\\.localdomain» type=FWD add forward-to=192.168.88.56 regexp=».*\\.test2\\.localdomain» type=FWD \u041c\u043e\u0435\u043c\u0443 \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0435\u043b\u0430! […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-83908","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mikrotik split-dns: ci sono riusciti | ProHoster","description":"Non sono trascorsi nemmeno 10 anni da quando gli sviluppatori di RoS (nella versione stabile 6.47) hanno aggiunto una funzionalit\u00e0 che consente di reindirizzare le richieste DNS secondo regole specifiche. Se prima dovevamo districarci con le regole Layer-7 nel firewall, ora \u00e8 tutto molto semplice ed elegante: \/ip dns static add forward-to=192.168.88.3 regexp=\".*\\.test1\\.localdomain\" type=FWD add forward-to=192.168.88.56 regexp=\".*\\.test2\\.localdomain\" La mia gioia non ha limiti!","canonical_url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mikrotik split-dns: \u043e\u043d\u0438 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u0438 | ProHoster","og:description":"\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 Layer-7 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 firewall, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0438\u0437\u044f\u0449\u043d\u043e: \/ip dns static add forward-to=192.168.88.3 regexp=".*\\.test1\\.localdomain" type=FWD add forward-to=192.168.88.56 regexp=".*\\.test2\\.localdomain" type=FWD \u041c\u043e\u0435\u043c\u0443 \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0435\u043b\u0430!","og:url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-03T17:42:59+00:00","article:modified_time":"2020-12-21T07:35:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83908","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:26","updated":"2026-02-09 16:50:30"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/83908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=83908"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/83908\/revisions"}],"predecessor-version":[{"id":158746,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/83908\/revisions\/158746"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=83908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=83908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=83908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}