1 of 10

In-a-Dyn :: DDNS�What and How

Joachim Wiberg

https://github.com/troglobit/inadyn

2 of 10

  • DDNS = Dynamic DNS�Updated automatically
  • DDNS Provider = ISP or RegistrarUsually an Internet Service Provider
  • DNS Name for an IP AddressMost ISP customers have DHCP or PPPoE/PPPoA address today

What is it?

3 of 10

ISPs are everywhere, where their customers are. Many are also DDNS providers.��The client should support as many as possible, and support updating more than one DNS entry.

Tip

In-a-Dyn supports over 30 different providers

In-a-Dyn also supports both IPv4 and IPv6

In-a-Dyn support HTTPS w/ OpenSSL or GnuTLS

4 of 10

You need a DDNS client to actively track any change in your external IP address and then send an update to your DDNS provider(s)

  • Check IP�Most DDNS providers have a serverhttp://checkip.dyndns.com/
  • Update DNS EntryCan be done manually, of course, but most users prefer an automatic service do this for them

How to use it?

5 of 10

Common Use-case

User has multiple connected sites Each site has a DHCP address

How do we set up a VPN to each site when ISPs can change address at any time?

6 of 10

Solution: DDNS

Sites connect to DDNS provider to keep their DNS entry up-to-date

VPN can be initiated from either end�Usually on-demand service VPNs are used. Works with Roadwarriors too

7 of 10

Protocol

But wait, what about HTTP POST to update?

Cloudflare, Yandex, DNSPod

Use HTTP GET to get IP address and HTTP GET to update the DNS

Dyn.com

Oh Dyn.com get a lot of customers

Let’s copy them!

Every other provider, e.g. Loopia, D.U.I.A., FreeDNS

8 of 10

Sounds simple, let’s wrap curl in a shell script!

Well … scripts work for many use-cases but there are things the DDNS providers don’t want you to know:

  • Too frequent updates = blockMany DDNS providers implement an automatic block if you send updates (without actual IP change) “too often”
  • Connectivity/Provider issuesNo Internet, we’ve all been there, but now the provider doesn’t respond or�responds weirdly?

Problems

9 of 10

Testing

HTTPS certificates, IPv4 vs IPv6, DDNS providers that block too frequent updates, etc.

How to test this?

You guessed it, manually …

Tip

In-a-dyn has a built-in .conf file validator

In-a-dyn supports custom providers ...

10 of 10

Questions?