LXD DNS-server and pfSense?

LXD
1

I’ve got a pfSense-router handling my networking and I’ve got a couple of different devices running various LXC-containers. I’d like to be able to set things up so that I can just spin up a container and be able to access it from fro my network by its hostname without having to set static DNS-entries in my router, ie. I’d like for it to query LXD’s own DNS-server for those.

I did attempt to follow the instructions at How to configure network zones - LXD documentation but even just attempting to use dig like in the example results in “Transfer failed” - error.

I did create a forward zone “lxd.mynetwork.net” and a reverse zone “190.207.10.in-addr.arpa” as follows:

“190.207.10.in-addr.arpa”:

description: ""
config: {}
name: 190.207.10.in-addr.arpa
used_by:
- /1.0/networks/lxdbr0

“lxd.mynetwork.net”:

description: ""
config: {}
name: lxd.mynetwork.net
used_by:
- /1.0/networks/lxdbr0

And the network itself is:

config:
  dns.domain: lxd.mynetwork.net
  dns.search: mynetwork.net
  dns.zone.forward: lxd.mynetwork.net
  dns.zone.reverse.ipv4: 190.207.10.in-addr.arpa
  ipv4.address: 10.207.190.1/24
  ipv4.nat: "true"
  ipv6.address: fd42:54d1:e9f8:33d2::1/64
  ipv6.nat: "true"
description: ""
name: lxdbr0
type: bridge
used_by:
- /1.0/instances/testcontainer
- /1.0/profiles/default
managed: true
status: Created
locations:
- none

What am I doing wrong? I am clearly doing something wrong, if even the dig-command isn’t working. That said, I don’t even know if I can use the DNS-server with pfSense to begin with, since the documentation talks about it only supporting AXFR, which I have no idea what that means or how to set it up with pfSense.

2

Your zone needs to have peers configured so the transfer is allowed.

stgraber@dakara:~$ lxc network zone show 250.17.172.in-addr.arpa
description: ""
config:
  peers.dakara.address: 127.0.0.1
name: 250.17.172.in-addr.arpa
used_by:
- /1.0/networks/lxdbr0

In my case, this allows localhost to do zone transfers.