Complete Noob Dynamic DNS Help (solved)

Message

Bigun · Post by **Bigun** » Tue Dec 22, 2020 3:18 am

I have no idea how to accomplish this, but I have my DNS hosted through gandi.net, and I would like to implement DynDNS (or something similar).

Any help is appreciated, I just have no clue where to start.

figueroa · Post by **figueroa** » Tue Dec 22, 2020 4:55 am

Create an account at dyn.com. Then add a service for your new host.

Install ddclient on your new host.

Code: Select all

emerge -p ddclient

Rerun without the -p if you are satisfied with the output from the pretend run. You can use -a instead of -p if you like.

dyn.com has a configurator for ddclient that will generate configuration settings for your /etc/ddclient/ddclient.conf.

Start the ddclient service.

Code: Select all

/etc/init.d/ddclient start

Add ddclient to your default runlevel.

Code: Select all

rc-update add ddclient default

mvaterlaus · Post by **mvaterlaus** » Tue Dec 22, 2020 2:06 pm

Hi Bigun,
if you want to stay at gandi.net, they have their own DynDNS method called LiveDNS [1]. The method is very easy, you have to obtain your API Key from your account page at gandi.net and use it to verify the DNS Update you issue with curl. And there is someone, who wrote a script [2] you can run in cron, to update the External IP at gandi.net. This is all explained on their website. On the other hand, the method proposed by figueroa is probably a bit simpler, but it's hosted by Oracle and they anounced[3] that they will discontinue the service. But at the moment, they did not shut it down yet, but who knows, when they will. Also, you have to migrate your domain to dyn.com.

[1]https://doc.livedns.gandi.net/
[2]https://virtuallytd.com/post/dynamic-dns-using-gandi/
[3]https://developers.slashdot.org/story/1 ... wn-in-2020

Post by Hu » Tue Dec 22, 2020 5:18 pm

I don't think you would need to migrate your domain. You could create a CNAME in your existing domain to point to the name managed by the dynamic DNS provider.

figueroa · Post by **figueroa** » Tue Dec 22, 2020 6:32 pm

I forgot to mention that DYN isn't free anymore. I've been a Pro user too long. I note the price has gone up. For Pro-level users, not much has changed. Other free services have also disappeared. On the other hand, when something is free, YOU are the product, now or some time in the future. DynPro is $55/year, or $99/2 years, or $220/5 years. I think I get my money's worth.

mvaterlaus · Post by **mvaterlaus** » Wed Dec 23, 2020 1:22 pm

Hu,
you are right. A CNAME record in DNS can point to another domain. But if Bigun runs a service with TLS Certs on the dyn.com domain name, he has to have a cert for that dyn.com domain. Otherwise the clients will refuse to communicate with the dyn.com Name, if the cert is issued for the domain running on gandi.net. Thus I gave the advice to migrate the domain to dyn.com.

Post by Hu » Wed Dec 23, 2020 7:50 pm

Yes, the CN (or at least a subjectAltName) in the certificate needs to match the name the client sees. However, once the CNAME is in place, I would expect that he could acquire a certificate with the CNAME as its target.

Bigun never stated what services he will be running through this, and while HTTPS hosting is possible, I expect he wants it for something else, like ssh while away from home.

figueroa · Post by **figueroa** » Fri Dec 25, 2020 3:57 am

In a very timely fashion, the following was received this morning:

Code: Select all

Dear Oracle+Dyn Customer:

This is a friendly reminder that your Oracle+Dyn account "USERNAME" has one or more services that will automatically renew in 7 days or less:
You have 1 DynDNS Pro service(s) about to be renewed. ...

For 20 years, we have been pleased to offer our Dynamic DNS (DynDNS Pro) service to now more than 5 million customers. We could never have predicted the overwhelming demand that we would see when we launched the service in the late 1990s. With our priority always the stability of the network and ease of use for our customers, we continue to make investments in the infrastructure that supports Dynamic DNS (DynDNS Pro). From time to time, we make price adjustments to help fund those necessary investments. The new 1 year price of Dynamic DNS (DynDNS Pro) is $55. For further visibility into the current pricing, please log into your account.

If you want to view or change your renewal settings, you may do so here.

If you have any questions, please contact billing or visit our support section.

Thank you,
Oracle+Dyn

Bigun · Post by **Bigun** » Fri Jan 01, 2021 3:58 pm

I'm just now getting the time to read the replies.

Yes, I host some https sites, not many, but a few.

I just tried Gandi's live DNS, and I like it. The script is a little lacking because I do have a few domains that need to be fixed, so I've added command line arguments to the script, seems to work well!

Code: Select all

#!/bin/bash
# This script gets the external IP of your systems then connects to the Gandi
# LiveDNS API and updates your dns record with the IP.

#check for three command line arguements
if [ "$#" -ne 3 ]; then
        echo "This script required three arguements:  The API key, the domain, and the subdomain"
        exit 1
fi

# Gandi LiveDNS API KEY
API_KEY=$1

# Domain hosted with Gandi
DOMAIN=$2

# Subdomain to update DNS
SUBDOMAIN=$3

# Get external IP address
EXT_IP=$(curl -s ifconfig.me)

#Get the current Zone for the provided domain
CURRENT_ZONE_HREF=$(curl -s -H "X-Api-Key: $API_KEY" https://dns.api.gandi.net/api/v5/domains/$DOMAIN | jq -r '.zone_records_href')

# Update the A Record of the subdomain using PUT
curl -D- -X PUT -H "Content-Type: application/json" \
        -H "X-Api-Key: $API_KEY" \
        -d "{\"rrset_name\": \"$SUBDOMAIN\",
             \"rrset_type\": \"A\",
             \"rrset_ttl\": 1800,
             \"rrset_values\": [\"$EXT_IP\"]}" \
        $CURRENT_ZONE_HREF/$SUBDOMAIN/A