Authoritative Dnsmasq in a MikroTik Container
9 hours ago
- The author joined the DN42 overlay network for experimenting with IP routing and wanted to host authoritative DNS for their .dn42 zone on a MikroTik RB4011 switch.
- MikroTik's built-in DNS service cannot act as an authoritative server, so the author opted to run a containerized dnsmasq instance.
- The dnsmasq container (dockurr/dnsmasq) was installed on the switch's internal flash despite wear risks, using two virtual IP addresses for separate authoritative and forwarding roles.
- Configuration included a dnsmasq config file with auth-server, auth-zone, auth-soa, and host-record directives for the ge0rg.dn42 zone and reverse DNS.
- After setup, the DNS zone was validated using the DN42 helper script, and the final result showed successful DNS resolution from a peer.
- The setup demonstrates using a single container for both authoritative and forwarding DNS on a MikroTik router within DN42.