Skip to content

Commit bc48510

Browse files
Update pillar-with-views.example
Add some more comments for explanation.
1 parent 3151899 commit bc48510

File tree

1 file changed

+11
-10
lines changed

1 file changed

+11
-10
lines changed

pillar-with-views.example

Lines changed: 11 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,19 @@
11
bind:
22
configured_acls: # We have an internal ACL restricted to our
3-
internal: # private IP ranges.
4-
- 127.0.0.0/8 # In this case, an ACL for external isn't needed
5-
- 10.0.0.0/8 # as that view will be matched by 'any'.
3+
internal: # private IP range.
4+
- 10.0.0.0/8 # In this case, an ACL for external isn't needed
5+
# as that view will be matched by 'any'.
66

77
# Notice that there is no 'configured_zones' at this indentation level.
88
# That is because when you are using views, the bind service forces all zones to be served via a view.
99
#
1010
# Also note - any other zones defined in any other conf files will either need to be commented out, or
1111
# also served via a view using a file include. If you have other zones being served outside of a view, bind will
12-
# fail to start.
12+
# fail to start and give you an error message indicating this. You will likely find these externally-defined zones
13+
# in /etc/named.conf and /etc/named.conf.local
1314

1415
configured_views:
15-
external:
16+
external: # A view called 'external' to match anything except the 'internal' ACL.
1617
match_clients:
1718
- any # This will match anything, including the public internet.
1819
configured_zones:
@@ -25,7 +26,7 @@ bind:
2526
notify: False
2627
dnssec: False
2728

28-
internal:
29+
internal: # The 'internal' view that is restricted to the 'internal' ACL.
2930
match_clients:
3031
- internal # This will match only our ACL named 'internal'.
3132
configured_zones:
@@ -39,7 +40,7 @@ bind:
3940
dnssec: False
4041

4142
available_zones:
42-
external.mydomain.com: # Beginning of the external zone definition.
43+
external.mydomain.com: # Beginning of the 'external' zone definition.
4344
file: external.mydomain.com.txt # The file in which to save this zone's record set - matches the file
4445
# specified in the 'external' view.
4546

@@ -67,7 +68,7 @@ bind:
6768
login: portal.mydomain.com.
6869
dashboard: www.mydomain.com.
6970

70-
internal.mydomain.com: # Beginning of the internal zone definition.
71+
internal.mydomain.com: # Beginning of the 'internal' zone definition.
7172
file: internal.mydomain.com.txt # The file in which to save this zone's record set - matches the file
7273
# specified in the 'internal' view.
7374

@@ -83,8 +84,8 @@ bind:
8384
ttl: 8600 # Optional. Not set by default
8485
records: # Records for the zone, grouped by type
8586
A:
86-
portal: 10.0.0.10
87-
gateway: 10.0.0.11
87+
portal: 10.0.0.10 # Here we serve all private IPs as opposed to the public IPs
88+
gateway: 10.0.0.11 # in the external zone.
8889
directory: 10.0.0.12
8990
ns1: 10.0.0.13
9091
www: 10.0.0.14

0 commit comments

Comments
 (0)