diff --git a/daemon/README.rst b/daemon/README.rst index 51f95febec4f7e23684895d6cf4a24d05560015d..7bede346c7ba84ee8d137df4a7748df18bdd9921 100644 --- a/daemon/README.rst +++ b/daemon/README.rst @@ -413,7 +413,23 @@ To configure kresd to listen on public interface, create a drop-in file: .. _kresd-socket-override-port: -The default port can also be overriden by using an empty ``ListenDatagram=`` or ``ListenStream=`` directive. This can be useful if you want to use the Knot DNS with the `dnsproxy module`_ to have both resolver and authoritative server running on the same machine. +The default locahost interface/port can also be removed/overriden by using an +empty ``ListenDatagram=`` or ``ListenStream=`` directive. This can be used when +you want to configure kresd to listen on all IPv4/IPv6 network interfaces (if +you've disabled IPv6 support in kernel, use ``0.0.0.0`` instead of ``[::]`` ). + +.. code-block:: none + + # /etc/systemd/system/kresd.socket.d/override.conf + [Socket] + ListenDatagram= + ListenStream= + ListenDatagram=[::]:53 + ListenStream=[::]:53 + +It can also be useful if you want to use the Knot DNS with the `dnsproxy +module`_ to have both resolver and authoritative server running on the same +machine. .. code-block:: none @@ -426,7 +442,8 @@ The default port can also be overriden by using an empty ``ListenDatagram=`` or ListenDatagram=[::1]:53000 ListenStream=[::1]:53000 -The ``kresd-tls.socket`` can also be configured to listen for TLS connections. +The ``kresd-tls.socket`` can also be configured in the same way to listen for +TLS connections. .. code-block:: bash diff --git a/distro/common/systemd/kresd.systemd.7 b/distro/common/systemd/kresd.systemd.7 index 420b110370d5380435c505a0b59b39e52a8814bb..1ffa911c7bfe8dd609706be00ebd173f81e02e9d 100644 --- a/distro/common/systemd/kresd.systemd.7 +++ b/distro/common/systemd/kresd.systemd.7 @@ -1,4 +1,4 @@ -.TH "kresd.systemd" "7" "2018-06-04" "CZ.NIC" "Knot Resolver Systemd Units" +.TH "kresd.systemd" "7" "2019-01-28" "CZ.NIC" "Knot Resolver Systemd Units" .\" .\" kresd.systemd.7 -- man page for systemd units for kresd .\" @@ -83,6 +83,27 @@ ListenStream=192.0.2.115:853 .RE .fi +To configure \fBkresd\fR to listen on all IPv4 and IPv6 interfaces, you can +remove the default localhost address by using an empty \fIListenDatagram=\fR, +\fIListenStream=\fR directive and then bind to the [::] address. If you've +disabled IPv6 support in kernel, use the 0.0.0.0 address instead. + +.nf +.RS 4n +# /etc/systemd/system/kresd.socket.d/override.conf +[Socket] +ListenDatagram= +ListenStream= +ListenDatagram=[::]:53 +ListenStream=[::]:53 + +# /etc/systemd/system/kresd-tls.socket.d/override.conf +[Socket] +ListenStream= +ListenStream=[::]:853 +.RE +.fi + For more detailed socket configuration, see \fBsystemd.socket\fR(5). .B Concurrent daemons