{"id":83908,"date":"2020-06-03T19:42:59","date_gmt":"2020-06-03T17:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali"},"modified":"2020-12-21T09:35:04","modified_gmt":"2020-12-21T07:35:04","slug":"mikrotik-split-dns-oni-eto-sdelali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","title":{"rendered":"Mikrotik split-dns: eles conseguiram","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00e3o se passaram nem 10 anos desde que os desenvolvedores do RoS (na vers\u00e3o est\u00e1vel 6.47) adicionaram uma funcionalidade que permite redirecionar consultas DNS de acordo com regras espec\u00edficas. Antes, era necess\u00e1rio se contorcer com regras Layer-7 no firewall, mas agora isso \u00e9 feito de forma simples e elegante:<\/p>\n

\/ip dns static\nadd forward-to=192.168.88.3 regexp=\".*\\.test1\\.localdomain\" type=FWD\nadd forward-to=192.168.88.56 regexp=\".*\\.test2\\.localdomain\" type=FWD\n<\/code><\/pre>\n
A minha felicidade n\u00e3o tem limites!
\n<\/a><\/noindex><\/p>\n
Quais s\u00e3o as implica\u00e7\u00f5es disso para n\u00f3s?<\/h2>\n
Pelo menos, nos livramos de constru\u00e7\u00f5es estranhas com NAT semelhantes a esta:<\/p>\n
\n\/ip firewall layer7-protocol\nadd comment=\"DNS Nat contoso.com\" name=contoso.com regexp=\"\\x07contoso\\x03com\"\n\/ip firewall mangle\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=udp\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=tcp\n\/ip firewall nat\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=udp to-addresses=192.0.2.15\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=tcp to-addresses=192.0.2.15\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=udp\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=tcp\n<\/code><\/pre>\n
E isso n\u00e3o \u00e9 tudo, agora \u00e9 poss\u00edvel definir v\u00e1rias servidores<\/a> redirecionamentos, o que ajudar\u00e1 a realizar failover DNS.
\nO processamento inteligente de DNS permitir\u00e1 iniciar a implementa\u00e7\u00e3o do IPv6 na rede da empresa. At\u00e9 agora, eu n\u00e3o tinha feito isso, pois precisava resolver uma s\u00e9rie de nomes DNS em endere\u00e7os locais, e no IPv6 isso n\u00e3o era poss\u00edvel sem algumas solu\u00e7\u00f5es bastante improvisadas.<\/p>\n
Fonte: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 Layer-7 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 firewall, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0438\u0437\u044f\u0449\u043d\u043e: \/ip dns static add forward-to=192.168.88.3 regexp=».*\\.test1\\.localdomain» type=FWD add forward-to=192.168.88.56 regexp=».*\\.test2\\.localdomain» type=FWD \u041c\u043e\u0435\u043c\u0443 \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0435\u043b\u0430! […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-83908","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mikrotik split-dns: eles conseguiram | ProHoster","description":"N\u00e3o se passaram nem 10 anos desde que os desenvolvedores do RoS (na vers\u00e3o est\u00e1vel 6.47) adicionaram uma funcionalidade que permite redirecionar consultas DNS de acordo com regras espec\u00edficas.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mikrotik split-dns: \u043e\u043d\u0438 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u0438 | ProHoster","og:description":"\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-03T17:42:59+00:00","article:modified_time":"2020-12-21T07:35:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83908","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:26","updated":"2026-02-09 16:50:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/83908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=83908"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/83908\/revisions"}],"predecessor-version":[{"id":158746,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/83908\/revisions\/158746"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=83908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=83908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=83908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}