I have 2 hosts on my LAN as illustrated below. On the host A i can access svc_2.lxd. I would like to be able to do the same from host B and i am wondering how to go about. I would like to have name resolution for .lxd managed by the dnsmasq attached to lxdbr0 on host A and I am wondering if it is possible. Any kind of advice would be most welcomed.
Thanks. From a routing point of view I could create a route from host A to host B and since IPv4 Forwarding is enabled on the later. Thus, I would be able to access the service with IP addresses. However, I would like to leverage the DNS resolver on lxdbr0 on host A instead of adding another DNS resolver somewhere else. Would you have an idea on how I could achieve that?
You could run another dnsmasq, bind9 or unbound DNS server on the system which then forwards the .lxd domain to the local dnsmasq that LXD operates while sending the rest of the traffic to resolve on a normal upstream DNS server.
I am unable to run another dnsmasq process on host A as the port 53 is already in use. Example:
$ dnsmasq --listen-address=192.168.0.10
dnsmasq: failed to create listening socket for port 53: Address already in use
And so, I tried to leverage resolved to achieve my goal but was not successful. Example of my approach:
Since,
$ # Host A
$ cat /etc/systemd/resolved.conf.d/lxd.conf
[Resolve]
DNS=10.0.0.1
Domains=lxd
$ # Host A
$ curl svc_2.lxd
hello
Then on host B I configured resolved as well given host A is reachable from B as they are on the same LAN. So the configuration in this example:
$ # Host B
$ cat /etc/systemd/resolved.conf.d/lxd.conf
[Resolve]
DNS=192.168.0.10 # IP Address of host A
Domains=lxd
From host B if i try to resolve svc_2.lxd, I can see that it is going towards the configured IP address. Example:
12:57:36.657138 IP (tos 0x0, ttl 64, id 21227, offset 0, flags [DF], proto UDP (17), length 56)
gl-pc.41778 > 192.168.0.10.domain: 44594+ A? svc_2.lxd. (28)
And on host A i can see incoming request from host B. But unfortunately I do not have an resolver bound to 192.168.0.10 and the resolve request dies. I was hoping whether the dnsmasq used by LXD could be adjusted accordingly. For instance, I was thinking whether I could append the IP address of host A to --listen-address flag of dnsmasq and thus there would be a correct DNS server to respond to the query? If this could be a way to try, would you have an idea how i could add this configuration? For instance now i can see that the process is launched to listen only on the gateway of the bridge:
Digging up a slightly old thread… but I needed to solve the same or very similar problem.
In my case your method, with a slight tweak, works! I set the DNS on Host B to use the IP for the lxdbr0. I am routing traffic to the lxd network to Host A in any case and because of this it works.
In my case Host A is on [10.10.129.10], and has lxdbr0 [10.11.2.1/24]. All traffic to [10.11.2.1/24] is routed to Host A via route table. On Host B:
