dnsdist 2: Yaml conversion for LUA function

[AxelBomp]

Hi everyone!

We are currently migrating to DNSdist version 2 and are converting our configuration files step-by-step into YAML. I am currently stuck on converting some LUA functions and am unable to achieve a working equivalent.

Here what we have:

blacklisted_ips = TimedIPSetRule()
local function blacklistIP(dq)
   blacklisted_ips:add(dq.remoteaddr, 60)
   return DNSAction.Refused
end

addAction( OrRule({QTypeRule(10), QTypeRule(65399)}), SetTagAction('tunneling-qtypes-refused', 'match'))
addAction( TagRule("tunneling-qtypes-refused", "match"), LuaAction(blacklistIP), {name="rule_tunnel_protection_qtypesrefused"})

I tried something like this, which does not work (error when launching dnsdist service):

  - name: "Blacklist NULL PRIVATE"
    selector:
      type: Tag
      tag: "tunneling-qtypes-refused"
      value: "match"
    action:
      type: Lua
      function_code: |
        blacklisted_ips = TimedIPSetRule()
        local function blacklistIP(dq)
          blacklisted_ips:add(dq.remoteaddr, 60)
          return DNSAction.Refused
        end

What would be the YAML equivalent? I'm not quite sure if dynamicRule would help...

Would you happen to have any examples of YAML configurations that are already in place and operational?

Thank you in advance for your assistance!

[rgacogne]

The Lua code passed in function_code needs to return a function, so you would have to add return blacklistIP at the end of the snippet. But a bigger problem is that selectors and actions are not available in this context, so calling TimedIPSetRule() is not going to work. Right now I don't see a way to do what you want from the YAML configuration, so I'm afraid it would have to remain in Lua format. I'll consider making selectors and actions available in the YAML configuration context in 2.0.1.

[AxelBomp]

Thanks for your answer Rémi!