openstack-zuul-jobs/roles/configure-unbound
David Moreau Simard f795128f21 Add support for configuring TTLs in configure-unbound
Given the volume and ephemeral nature of the nodes we are running jobs
on, we're interested in raising the minimum TTL to ensure we're not
needlessly querying domains all the time.

Some domains such as github.com or fedoraproject.org have low TTLs and
we suspect there is a correlation between their low TTLs and the fact
that we're seeing increased DNS lookup rates for these domains.

Change-Id: I6d9656cb07a694fc2f54f256a63af814c034ffb8
2017-11-28 17:29:59 +00:00
..
defaults Add support for configuring TTLs in configure-unbound 2017-11-28 17:29:59 +00:00
handlers General improvements to configure-unbound role 2017-11-28 11:52:30 -05:00
tasks Add support for configuring TTLs in configure-unbound 2017-11-28 17:29:59 +00:00
templates Add support for configuring TTLs in configure-unbound 2017-11-28 17:29:59 +00:00
vars Add support for configuring TTLs in configure-unbound 2017-11-28 17:29:59 +00:00
README.rst Add support for configuring TTLs in configure-unbound 2017-11-28 17:29:59 +00:00

An ansible role to dynamically configure DNS forwarders for the unbound caching service. IPv6 will be preferred when there is a usable IPv6 default route, otherwise IPv4.

Note

This is not a standalone unbound configuration role. Base setup is done during image builds in project-config:nodepool/elements/nodepool-base/finalise.d/89-unbound; here we just do dynamic configuration of forwarders based on the interfaces available on the actual host.

Role Variables