unbound and (isc) dhcpd startup order

[Goran Mekić]

On Mon, Jun 15, 2020 at 09:10:18AM +0300, Andriy Gapon wrote:
>
> I am configuring a small LAN -- mostly a gateway / router for it -- and I am
> using unbound for a local DNS and isc-dhcp44-server for DHCP.
> I have a few hosts with static IP addresses (for various reasons).
> So, in unbound.conf I have an entry like
>   local-data: "hipster.home.arpa. IN A 192.168.0.222"
> and in dhcpd.conf  have:
>   host hipster {
>
>
>     hardware ethernet 40:74:e0:xx:xx:xx;
>
>
>     fixed-address hipster.home.arpa;
>
>
>  }
>
> I am using a DNS name to avoid hardcoding the same IP address twice.
> But obviously this depends on the local DNS server starting before the HDCP
> server if they are on the same host / router.
> It seems that at the moment there is nothing to ensure that order.
>
> For the moment I modified rc.d/unbound to add this line:
>   # BEFORE: dhcpd
> I am not sure if this is the best solution and it's something that can be
> included into the port.
>
> On a related note, unbound rc script provides "unbound" service.
> I think that maybe it should provide something more generic such as "nameserver"
> or "dns-server" (not sure if there is an established name for that).
> The reason I am saying this is that, IMO, if unbound is replaced with some other
> name server implementation the rc dependency chains should stay the same.
>
> Thanks!
> --
> Andriy Gapon

It might not be the exact answer you're looking for, but you might get
some idea. I run isc-dhcpd inside CBSD jail and CBSD is started after
local_unbound. For most of my needs, CBSD's b_order (short for boot
order) works nicely, so if jail is an option for you, you might consider
having services in jails and then use your jail manager (does jail.conf
boots jails in order they appear in .conf file or is otherwise able to
sort jail startups?) to force jail startup order.

Regards,
meka
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20200615/7032e097/attachment.sig>