{"id":83908,"date":"2020-06-03T19:42:59","date_gmt":"2020-06-03T17:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali"},"modified":"2020-12-21T09:35:04","modified_gmt":"2020-12-21T07:35:04","slug":"mikrotik-split-dns-oni-eto-sdelali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","title":{"rendered":"Mikrotik split-dns: au f\u0103cut-o","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nu au trecut nici 10 ani de c\u00e2nd dezvoltatorii RoS (\u00een stable 6.47) au ad\u0103ugat func\u021bionalitatea care permite redirec\u021bionarea cererilor DNS conform unor reguli speciale. Dac\u0103 anterior era necesar s\u0103 ne complic\u0103m cu regulile Layer-7 \u00een firewall, acum se face simplu \u0219i elegant:<\/p>\n

\/ip dns static\nadd forward-to=192.168.88.3 regexp=\".*\\.test1\\.localdomain\" type=FWD\nadd forward-to=192.168.88.56 regexp=\".*\\.test2\\.localdomain\" type=FWD\n<\/code><\/pre>\n
Fericirea mea nu cunoa\u0219te limite!
\n<\/a><\/noindex><\/p>\n
Ce consecin\u021be are aceasta pentru noi?<\/h2>\n
Cel pu\u021bin, ne eliber\u0103m de structuri ciudate cu NAT de tipul acesta:<\/p>\n
\n\/ip firewall layer7-protocol\nadd comment=\"DNS Nat contoso.com\" name=contoso.com regexp=\"\\x07contoso\\x03com\"\n\/ip firewall mangle\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=udp\nadd action=mark-packet chain=prerouting comment=\"mark dns contoso.com\" dst-address-type=local dst-port=53 in-interface-list=DNSMASQ layer7-protocol=contoso.com new-packet-mark=dns-contoso.com passthrough=yes protocol=tcp\n\/ip firewall nat\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=udp to-addresses=192.0.2.15\nadd action=dst-nat chain=dstnat comment=\"DST-NAT dns contoso.com\" dst-port=53 in-interface-list=DNSMASQ packet-mark=dns-contoso.com protocol=tcp to-addresses=192.0.2.15\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=udp\nadd action=masquerade chain=srcnat comment=\"mask dns contoso.com\" dst-port=53 packet-mark=dns-contoso.com protocol=tcp\n<\/code><\/pre>\n
\u0218i asta nu e tot, acum putem defini mai multe servere<\/a> redirec\u021bion\u0103ri, ceea ce va ajuta la realizarea failover-ului DNS.
\nPrelucrarea inteligent\u0103 a DNS-ului va permite \u00eenceputul implement\u0103rii IPv6 \u00een re\u021beaua companiei. P\u00e2n\u0103 acum, nu am f\u0103cut acest lucru deoarece trebuia s\u0103 traduc mai multe nume DNS \u00een adrese locale, iar \u00een IPv6 acest lucru nu era posibil f\u0103r\u0103 c\u00e2teva solu\u021bii destul de complexe.<\/p>\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 Layer-7 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438 \u0432 firewall, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0438\u0437\u044f\u0449\u043d\u043e: \/ip dns static add forward-to=192.168.88.3 regexp=».*\\.test1\\.localdomain» type=FWD add forward-to=192.168.88.56 regexp=».*\\.test2\\.localdomain» type=FWD \u041c\u043e\u0435\u043c\u0443 \u0441\u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0435\u0442 \u043f\u0440\u0435\u0434\u0435\u043b\u0430! […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-83908","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mikrotik split-dns: au reu\u0219it | ProHoster","description":"Nu au trecut nici 10 ani de c\u00e2nd dezvoltatorii RoS (\u00een stable 6.47) au ad\u0103ugat func\u021bionalitatea care permite redirec\u021bionarea cererilor DNS conform unor reguli speciale.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mikrotik split-dns: \u043e\u043d\u0438 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u0438 | ProHoster","og:description":"\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 10 \u043b\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 RoS (\u0432 stable 6.47) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c DNS \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/mikrotik-split-dns-oni-eto-sdelali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-03T17:42:59+00:00","article:modified_time":"2020-12-21T07:35:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83908","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:26","updated":"2026-02-09 16:50:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/83908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=83908"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/83908\/revisions"}],"predecessor-version":[{"id":158746,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/83908\/revisions\/158746"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=83908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=83908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=83908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}