freebsd-dev/contrib/openresolv
Pedro F. Giffuni 9af6c78cd4 MFV 354917, 354918, 354919
openresolv: update to version 3.9.2

MFC after:	3 weeks
2019-11-20 23:56:20 +00:00
..
config-null.mk
configure
dnsmasq.in
GNUmakefile
libc.in
LICENSE
Makefile
named.in
pdns_recursor.in
pdnsd.in
README.md
resolvconf.8.in
resolvconf.conf
resolvconf.conf.5.in
resolvconf.in
unbound.in

openresolv

openresolv is a resolvconf implementation which manages /etc/resolv.conf.

/etc/resolv.conf is a file that holds the configuration for the local resolution of domain names. Normally this file is either static or maintained by a local daemon, normally a DHCP daemon. But what happens if more than one thing wants to control the file? Say you have wired and wireless interfaces to different subnets and run a VPN or two on top of that, how do you say which one controls the file? It's also not as easy as just adding and removing the nameservers each client knows about as different clients could add the same nameservers.

Enter resolvconf, the middleman between the network configuration services and /etc/resolv.conf. resolvconf itself is just a script that stores, removes and lists a full resolv.conf generated for the interface. It then calls all the helper scripts it knows about so it can configure the real /etc/resolv.conf and optionally any local nameservers other than libc.

Reasons for using openresolv

Why openresolv over the Debian implementation? Here's some reasons:

  • Works with POSIX shell and userland
  • Does not need awk, grep or sed which means we can work without /usr mounted
  • Works with other init systems than Debians' out of the box
  • Available as a 2 clause BSD license
  • Prefer configs via IF_METRIC for dynamic ordering
  • Configures zones for local resolvers other than libc

The last point is quite important, especially when running VPN systems. Take the following resolv.conf files which have been generated by a DHCP client and sent to resolvconf:

# resolv.conf from bge0
search foo.com
nameserver 1.2.3.4

# resolv.conf from tap0
domain bar.org
nameserver 5.6.7.8

In this instance, queries for foo.com will go to 1.2.3.4 and queries for bar.org will go to 5.6.7.8. This does require the resolvers to be configured to pickup the resolvconf generated configuration for them though. openresolv ships with helpers for:

See the configuration section for more details.