Data bag and Attribute driven DHCP server.
- Supports setting up Master/Master isc DHCP failover.
- Includes Support for ddns
- Includes LWRPs for managing hosts, groups and subnets.
- Use databags or attributes + wrapper cooks to manage dhcp server Example
Large parts were borrowed from work initially done by Dell, extended by Atalanta Systems and reworked by Matt Ray and Opscode. Big thanks to all of them.
Tested on the following with Chef 11 and Chef 12:
Ubuntu 12.04
CentOS 6
- only setup to handle ipv4
Stub recipe that does nothing. Good for including LWRP's but not the other recipe stuffs.
The node will install and configure the dhcp-server
application.
Configuration is through various dhcp_X bags, and the current role/environment
Almost everyone of the parameters and options are able to be overrode in the host/group/network scope these are general defaults for the server.
Check out the man page for details on dhcpd.conf options/params.
attribute | Type | Default | description |
---|---|---|---|
node[:dhcp][:use_bags] |
Boolean |
true | When false we won't attempt to load data from bags. |
node[:dhcp][:hosts] |
Array |
[] |
The list of hosts items that this server should load |
node[:dhcp][:groups] |
Array |
[] |
The list of group items this server should load |
node[:dhcp][:networks] |
Array |
[] |
The list of network items this node should load |
node[:dhcp][:interfaces] |
Array |
[] |
The Network Interface(s) to listen on. If an empty list then we will listen on all interfaces. |
node[:dhcp][:rndc_keys] |
Array |
Attribute based representation of rndc keys you want to use. | |
node[:dhcp][:hosts_bag] |
String |
dhcp_hosts | The name of the data bag that holds host items. |
node[:dhcp][:groups_bag] |
String |
dhcp_groups | The name of the data bag that holds group items |
node[:dhcp][:networks_bag] |
String |
dhcp_networks | The name of the data bag that holds network items |
node[:dhcp][:host_data] |
Hash |
{} |
Hash of hosts data. The node[dhcp][:hosts] entries should have a corresponding entry here when not using bags |
node[:dhcp][:group_data] |
Hash |
{} |
Same as host_data, but for groups |
node[:dhcp][:network_data] |
Hash |
{} |
Same as host_data, but for networks |
node[:dhcp][:failover] |
Boolean |
false |
Enable Failover support buy setting to true |
node[:dhcp][:failover_lease_hack] |
Boolean |
false |
Force partner-down state on start by rewriting lease file |
node[:dhcp][:allows] |
Array |
["booting", "bootp", "unknown-clients"] | Global Dhcpd allow entries |
node[:dhcp][:my_ip] |
String |
Nil | Set host IP address in failover setup. node[:ipaddress] is used if empty. |
node[:dhcp][:masters] |
Array |
Array of hashes to override node search for masters. Must have :ipaddress key. | |
node[:dhcp][:slaves] |
Array |
Array of hashes to override node search for slaves. | |
node['dhcp']['extra_files'] |
Array |
Array of file paths to also include as configs in node['dhcp']['config_file'] |
attribute | Type | Default | description |
---|---|---|---|
node[:dhcp][:options]['domain-name-servers'] |
String |
"8.8.8.8, 8.8.4.4" | List of dns servers to send to clients in the global scope |
node[:dhcp][:options]['host-name'] |
String |
" = binary-to-ascii (16, 8, "-", substring (hardware, 1, 6))" | Options for global scope host-name settings. The default here will generate a host as mac address if the node doesn't provide a hostname or is not defined in dns/hosts/groups. |
node[:dhcp][:options]['domain-name'] |
String |
""#{domain}"" | Set domainname in the global scope to this nodes domain |
These are all just k/v entries in the global params hash. All values are type: String
attribute | Type | Default | description |
---|---|---|---|
node[:dhcp][:parameters]["default-lease-time"] |
String |
"6400" | Set the default lease time in the global scope |
node[:dhcp][:parameters]["ddns-domainname"] |
String |
""#{domain}""` | Set the ddns domain to this nodes domain |
node[:dhcp][:parameters]["ddns-update-style"] |
String |
"interim" | ddns Update style |
node[:dhcp][:parameters]["max-lease-time"] |
String |
"86400" | Max Lease time |
node[:dhcp][:parameters]["update-static-leases"] |
String |
"true" | Make sure we push static ip adresses defined in groups/hosts to the dns server |
node[:dhcp][:parameters]["one-lease-per-client"] |
String |
"true" | When a client requests an ip it will release any held leases. |
node[:dhcp][:parameters]["authoritative"] |
String |
"" | This setting has no value on purpose thats how isc-dhcpd wants it. |
node[:dhcp][:parameters]["ping-check"] |
String |
"true" | Enable Address collision checking |
node[:dhcp][:parameters]["next-server"] |
String |
"#{ipaddress}" |
Set this server as the global next-server |
node[:dhcp][:parameters]["filename"] |
String |
'"pxelinux.0"' |
For tftp file name Note: the quotes are necessary for this option in the fall throught to dhcpd config. |
attribute | Type | Default | description |
---|---|---|---|
node[:dhcp][:failover_params]["mclt"] |
String |
"3600" | Set Maximum Client Lead Time |
node[:dhcp][:failover_params]["port"] |
String |
"647" | TCP port to listen for connections from peer |
node[:dhcp][:failover_params]["peer_port"] |
String |
"647" | TCP port to connect to failover peer |
node[:dhcp][:failover_params][auto_partner_down""] |
String |
"0" | Timeout in seconds to enter partner-down state if peer is unavailable |
RHEL Platforms*
attribute | Type | Default |
---|---|---|
node[:dhcp][:dir] |
String |
"/etc/dhcpd" |
node[:dhcp][:package_name] |
String |
"dhcp" |
node[:dhcp][:service_name] |
String |
"dhcpd" |
node[:dhcp][:config_file] |
String |
"/etc/dhcp/dhcpd.conf" on RHEL < 6 it defaults to "/etc/dhcpd.conf |
node[:dhcp][:init_config] |
String |
"/etc/sysconfig/dhcpd" |
Debian Platforms
attribute | Type | Default |
---|---|---|
node[:dhcp][:dir] |
String |
"/etc/dhcpd" |
node[:dhcp][:package_name] |
String |
"isc-dhcp-server" |
node[:dhcp][:service_name] |
String |
"isc-dhcp-server" |
node[:dhcp][:config_file] |
String |
"/etc/dhcp/dhcpd.conf" |
node[:dhcp][:init_config] |
String |
"/etc/default/isc-dhcp-server" |
Data bags drive the lionshare of the dhcp configuration. Beyond the global settings. It is not required to configure
any bags other than dhcp_networks to get up and running, But if you want to statically map a network or have handy
Host names provisioned by dhcp you will have to add either dhcp_groups/dhcp_hosts
bags and items.
You can generate example bags by using these handy commands
knife data bag create dhcp_networks
knife data bag create dhcp_groups
knife data bag create dhcp_hosts
knife data bag from file dhcp_networks examples/data_bags/dhcp_networks
knife data bag from file dhcp_groups examples/data_bags/dhcp_groups
knife data bag from file dhcp_hosts examples/data_bags/dhcp_hosts
Looked up via node[:dhcp][:networks_bag]
. Describes networks this dhcp server should be configured to provide services for.
Per-network options can be provided as an array of strings where each string is a dhcp option.
Make sure you escape "
's properly as dhcpd is touchy about the format of values.
{
"id": "192-168-1-0_24",
"routers": [ "192.168.1.1" ],
"address": "192.168.1.0",
"netmask": "255.255.255.0",
"broadcast": "192.168.1.255",
"range": "192.168.1.50 192.168.1.240",
"options": [ "time-offset 10" ],
"next_server": "192.168.1.11"
}
Looked up via node[:dhcp][:grougroups]
Items for this bag are group entries as per the man page.
Groups are sets of machines that can be configured with common parameters. A group can be bare. I.e.
Contains no host or parameters entries whatsover, and just defines options.
The only required key in a host def is the "mac":
key. Everything else is optional
Example Group Bag
{
"id": "test",
"pxe": "ubuntu-precise",
"parameters": [
"use-host-decl-names on",
"max-lease-time 300",
"default-lease-time 120",
"next-server \"someplace\""
],
"hosts": {
"some-vm": {
"parameters": [ ],
"mac": "11:22:33:44:55:66",
"ip": "192.168.1.111"
},
"another-host": {
"mac": "22:33:44:55:66:77"
}
}
}
There are a few keys that merit more discussion:
Groups in isc-dhcp can define lists of hosts. In this example we are using the use-host-decl-names on
tell dhcp to use the "some-vm" and "another-host" entries as the host-name for these clients.
As well as setting other per-group parameters.
Each Host in the hosts Hash can have a number of settings, but the only required setting is "mac":
the mac address
for the host.
Key | Description |
---|---|
"mac": |
mac address of this host |
"ip": |
ip address of this host |
"parameters": |
an array of isc-dhcpd parameters as-per the global parameter setting. |
"pxe": |
This key is used by my pxe cookbook to figure out what pxe item you want this group to boot too. That Pxe cookbook should be released soon (hopefully). |
Dhcp hosts bag is looked up via node[:dhcp][:hosts_bag]
, and contains Host Items.
Example Most Basic host:
{
"id": "vagrant-vm",
"hostname": "vagrant.vm",
"mac": "08:00:27:f1:1f:b6",
}
Example Complex host:
{
"id": "pxe_test-vm",
"hostname": "pxe_test.vm",
"mac": "08:00:27:8f:7b:db",
"ip": "192.168.1.31",
"parameters": [ ],
"options": [ ],
"pxe": "ubuntu-precise"
}
Manipulate host entries in dhcpd
Action | Description |
---|---|
add |
_default_ Add this host record |
remove |
Delete this host record |
Param | Type | Default |
---|---|---|
hostname |
String |
|
macaddress |
String |
|
ipaddress |
String |
|
options |
Array |
[] |
parameters |
Array |
[] |
conf_dir |
String |
"/etc/dhcp" |
Add a Node
dhcp_host "myhost" do
hostname "somebox.foobar.com"
macaddress "08:00:27:f1:1f:b6"
ipaddress "192.168.1.22"
options [ "domain-name-servers 8.8.8.8" ]
end
Remove a node
dhcp_host "myhost" do
action :remove
hostname "somebox.foobar.com"
end
If you undefine an entry it will also get removed.
Action | Description |
---|---|
add |
_default_ Add this host record |
remove |
Delete this host record |
Param | Type | Default | Desciption |
---|---|---|---|
name |
String |
:name_attribute |
|
hosts |
Hash |
{} |
This is a hash of host entries that follow the host-databag format. See the example entry in examples directory |
parameters |
Array |
[] |
|
evals |
Array |
[] |
This is an array of multiline strings of eval |
conf_dir |
String |
"/etc/dhcp" |
The directory where the config files are stored |
hosts_data = {
"some-vm"=> {"parameters"=>[], "mac"=>"11:22:33:44:55:66", "ip"=>"192.168.1.111"},
"another-host"=>{"mac"=>"22:33:44:55:66:77"}}
}
dhcp_group "some_group" do
parameters [ "default-lease-time 120", "next-server \"someplace\""]
hosts hosts_data
end
Action | Description |
---|---|
add |
_default_ Add this host record |
remove |
Delete this host record |
Param | Type | Default | Desciption |
---|---|---|---|
subnet |
String |
:name_attribute |
The network subnet |
broadcast |
String |
nil |
The broadcast address for the subnet |
netmask |
String |
nil |
The netmask address for the subnet |
routers |
Array |
[] |
Gateways for the subnet |
options |
Array |
[] |
DHCP options to set for the subnet |
pool |
block |
nil |
Define a pool block for a dhcp_subnet . See 'Parameters for pool' below. |
next_server |
String |
nil |
Next server for TFTP/PXE |
evals |
Array |
[] |
This is an array of multiline strings of eval |
ddns |
String |
nil |
Domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) |
key |
Hash |
{} |
Shared secret key for DDNS |
zones |
Array |
[] |
NOTE: Please help update with a good description |
conf_dir |
String |
"/etc/dhcp" |
Main dhcpd config directory |
Param | Type | Default | Desciption |
---|---|---|---|
peer |
String |
nil |
Peer server for this segment |
range |
String or Array |
[] |
Range of IPs to make available for DHCP in the subnet |
allow |
String |
nil |
Only those clients that match any entries on the allow list will be eligible. |
deny |
String |
nil |
Only those clients that do not match any entries on the deny list will be eligible. |
dhcp_subnet "192.168.1.0" do
pool do
range ["192.168.1.100 192.168.1.200", "10.33.66.10 10.33.66.100"]
end
netmask "255.255.255.0"
broadcast "192.168.1.255"
options [ "time-offset 10" ]
next_server "192.168.1.11"
routers "192.168.1.1"
evals [ %q|
if exists user-class and option user-class = "iPXE" {
filename "bootstrap.ipxe";
} else {
filename "undionly.kpxe";
}
| ]
end
Action | Description |
---|---|
add |
_default_ Add this shared network |
remove |
Delete this shared network record |
Param | Type | Default | Desciption |
---|---|---|---|
subnet |
dhcp_subnet |
nil |
The network subnet to define inside the shared network. Can define multiple. |
dhcp_shared_network 'mysharednet' do
subnet '192.168.1.0' do
pool do
range ['192.168.1.100 192.168.1.200', '10.33.66.10 10.33.66.100']
end
netmask '255.255.255.0'
broadcast '192.168.1.255'
next_server '192.168.1.11'
routers '192.168.1.1'
evals [ %q|
if exists user-class and option user-class = "iPXE" {
filename "bootstrap.ipxe";
} else {
filename "undionly.kpxe";
}
| ]
end
subnet '10.0.2.0' do
broadcast '10.0.2.254'
netmask '255.255.255.0'
pool do
range ['10.0.2.50 10.0.2.240']
end
end
end
Manage dhcp classes
Action | Description |
---|---|
add |
_default_ Add this host record |
Param | Type | Default |
---|---|---|
match |
String |
|
subclass |
String |
|
subclasses |
Array |
[] |
Add a Node
dhcp_class 'ignorehosts' do
match 'hardware'
subclass '1:10:bf:48:42:55:01'
subclass '1:10:bf:48:42:55:02'
end
If you undefine an entry it will also get removed.
Testing uses ChefDK 0.9.0. Assuming it's installed and you've initialized your shell with chef shell-init
you can run rake
to run testing.
https://github.com/spheromak/dhcp-cook
Maintainer | Jacob McCann |
Original Author | Jesse Nelson |
Author | Matt Ray |
Contributor | Myles Steinhauser |
Contributor | Bao Nguyen |
Contributor | Chaman Kang |
Contributor | Will Reichert |
Contributor | Simon Johansson |
Contributor | Robert Choi |
Contributor | Hippie Hacker |
Contributor | Eric Blevins |
Copyright | Copyright (c) 2013 Jesse Nelson |
Copyright | 2011 Atalanta Systems |
Copyright | 2011 Dell, Inc. |
Copyright | 2011 Opscode, Inc. |
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.