Using Infoblox as DHCP and DNS Providers

You can use orcharhino Proxy to connect to your Infoblox application to create and manage DHCP and DNS records, and to reserve IP addresses.

Infoblox Limitations

All DHCP and DNS records can be managed only in a single Network or DNS view. After you install the Infoblox modules on orcharhino Proxy and set up the view using the orcharhino-installer command, you cannot edit the view.

orcharhino Proxy communicates with a single Infoblox node using the standard HTTPS web API. If you want to configure clustering and High Availability, make the configurations in Infoblox.

Hosting PXE-related files using Infoblox’s TFTP functionality is not supported. You must use orcharhino Proxy as a TFTP server for PXE provisioning. For more information, see Configuring Networking.

orcharhino IPAM feature cannot be integrated with Infoblox.

Infoblox Prerequisites

  • You must have Infoblox account credentials to manage DHCP and DNS entries in orcharhino.

  • Ensure that you have Infoblox administration roles with the names: DHCP Admin and DNS Admin.

  • The administration roles must have permissions or belong to an admin group that permits the accounts to perform tasks through the Infoblox API.

Installing the Infoblox CA Certificate on orcharhino Proxy

You must install Infoblox HTTPS CA certificate on the base system for all orcharhino Proxies that you want to integrate with Infoblox applications.

You can download the certificate from the Infoblox web UI, or you can use the following OpenSSL commands to download the certificate:

$ update-ca-trust enable
$ openssl s_client -showcerts -connect infoblox.example.com:443 </dev/null | \
openssl x509 -text >/etc/pki/ca-trust/source/anchors/infoblox.crt
$ update-ca-trust extract

  • The infoblox.example.com entry must match the host name for the Infoblox application in the X509 certificate.

To test the CA certificate, use a CURL query:

$ curl -u admin:password https://infoblox.example.com/wapi/v2.0/network

Example positive response:

[
    {
        "_ref": "network/ZG5zLm5ldHdvcmskMTkyLjE2OC4yMDIuMC8yNC8w:infoblox.example.com/24/default",
        "network": "192.168.202.0/24",
        "network_view": "default"
    }
]

Installing the DHCP Infoblox module

Use this procedure to install the DHCP Infoblox module on orcharhino Proxy. Note that you cannot manage records in separate views.

You can also install DHCP and DNS Infoblox modules simultaneously by combining this procedure and Installing the DNS Infoblox Module.

DHCP Infoblox Record Type Considerations

Use only the --foreman-proxy-plugin-dhcp-infoblox-record-type fixedaddress option to configure the DHCP and DNS modules.

Configuring both DHCP and DNS Infoblox modules with the host record type setting causes DNS conflicts and is not supported. If you install the Infoblox module on orcharhino Proxy with the --foreman-proxy-plugin-dhcp-infoblox-record-type option set to host, you must unset both DNS orcharhino Proxy and Reverse DNS orcharhino Proxy options because Infoblox does the DNS management itself. You cannot use the host option without creating conflicts and, for example, being unable to rename hosts in orcharhino.

Procedure

  1. On orcharhino Proxy, enter the following command:

    $ orcharhino-installer --enable-foreman-proxy-plugin-dhcp-infoblox \
--foreman-proxy-dhcp true \
--foreman-proxy-dhcp-managed false \
--foreman-proxy-dhcp-provider infoblox \
--foreman-proxy-dhcp-server infoblox.example.com \
--foreman-proxy-plugin-dhcp-infoblox-dns-view default \
--foreman-proxy-plugin-dhcp-infoblox-network-view default \
--foreman-proxy-plugin-dhcp-infoblox-password infoblox \
--foreman-proxy-plugin-dhcp-infoblox-record-type fixedaddress \
--foreman-proxy-plugin-dhcp-infoblox-username admin

  2. In the orcharhino management UI, navigate to Infrastructure > orcharhino Proxies and select the orcharhino Proxy with the Infoblox DHCP module and click Refresh.

  3. Ensure that the dhcp features are listed.

  4. For all domains managed through Infoblox, ensure that the DNS orcharhino Proxy is set for that domain. To verify, in the orcharhino management UI, navigate to Infrastructure > Domains, and inspect the settings of each domain.

  5. For all subnets managed through Infoblox, ensure that DHCP orcharhino Proxy and Reverse DNS orcharhino Proxy is set. To verify, in the orcharhino management UI, navigate to Infrastructure > Subnets, and inspect the settings of each subnet.

Installing the DNS Infoblox Module

Use this procedure to install the DNS Infoblox module on orcharhino Proxy. You can also install DHCP and DNS Infoblox modules simultaneously by combining this procedure and Installing the DHCP Infoblox Module.

DNS records are managed only in the default DNS view, it’s not possible to specify which DNS view to use.

Procedure

  1. On orcharhino Proxy, enter the following command to configure the Infoblox module:

    $ orcharhino-installer --enable-foreman-proxy-plugin-dns-infoblox \
--foreman-proxy-dns true \
--foreman-proxy-dns-provider infoblox \
--foreman-proxy-plugin-dns-infoblox-dns-server infoblox.example.com \
--foreman-proxy-plugin-dns-infoblox-dns-view default \
--foreman-proxy-plugin-dns-infoblox-password infoblox \
--foreman-proxy-plugin-dns-infoblox-username admin

    Optionally, you can change the value of the --foreman-proxy-plugin-dns-infoblox-dns-view option to specify a DNS Infoblox view other than the default view.

  2. In the orcharhino management UI, navigate to Infrastructure > orcharhino Proxies and select the orcharhino Proxy with the Infoblox DNS module and click Refresh.

  3. Ensure that the dns features are listed.

The text and illustrations on this page are licensed by ATIX AG under a Creative Commons Attribution–Share Alike 3.0 Unported ("CC-BY-SA") license. This page also contains text from the official Foreman documentation which uses the same license ("CC-BY-SA").