Huawei Cloud DNS

Configuration

This provider is for the Huawei Cloud DNS(Public DNS). To use this provider, add an entry to creds.json with TYPE set to HUAWEICLOUD. along with the API credentials.

Example:

creds.json

{
  "huaweicloud": {
    "TYPE": "HUAWEICLOUD",
    "KeyId": "YOUR_ACCESS_KEY_ID",
    "SecretKey": "YOUR_SECRET_ACCESS_KEY",
    "Region": "YOUR_SERVICE_REGION"
  }
}

Metadata

There are some record level metadata available for this provider:

• hw_line (Line ID, default "default_view") Refer to the Intelligent Resolution for more information.

  • Available Line ID refer to Resolution Lines. Custom Line ID can also be used.

• hw_weight (0-1000, default "1") Refer to the Configuring Weighted Routing for more information.

• hw_rrset_key (default "") User defined key for RRset load balance. This value would be stored in the description field of the RRset.

The following example shows how to use the metadata:

dnsconfig.js

var REG_NONE = NewRegistrar("none");
var DSP_HWCLOUD = NewDnsProvider("huaweicloud");

D("example.com", REG_NONE, DnsProvider(DSP_HWCLOUD),
    // this example will create 4 rrsets with the same name "test"
    A("test", "8.8.8.8"),
    A("test", "8.8.4.4"),
    A("test", "9.9.9.9", {hw_weight: "10"}),         // Weighted Routing
    A("test", "149.112.112.112", {hw_weight: "10"}), // Weighted Routing
    A("test", "223.5.5.5", {hw_line: "CN"}), // GEODNS
    A("test", "223.6.6.6", {hw_line: "CN", hw_weight: "10"}), // GEODNS with weight

    // this example will create 3 rrsets with the same name "rr-lb"
    A("rr-lb", "10.0.0.1", {hw_weight: "10", hw_rrset_key: "lb-zone-a"}),
    A("rr-lb", "10.0.0.2", {hw_weight: "10", hw_rrset_key: "lb-zone-a"}),
    A("rr-lb", "10.0.1.1", {hw_weight: "10", hw_rrset_key: "lb-zone-b"}),
    A("rr-lb", "10.0.1.2", {hw_weight: "10", hw_rrset_key: "lb-zone-b"}),
    A("rr-lb", "10.0.2.2", {hw_weight: "0",  hw_rrset_key: "lb-zone-c"}),
);

Usage

An example configuration:

dnsconfig.js

var REG_NONE = NewRegistrar("none");
var DSP_HWCLOUD = NewDnsProvider("huaweicloud");

D("example.com", REG_NONE, DnsProvider(DSP_HWCLOUD),
    A("test", "1.2.3.4"),
);

Activation

DNSControl depends on a standard IAM User with permission to list, create and update hosted zones.

The DNS FullAccess policy will also work, but that provides access to many other areas and violates the "principle of least privilege".

The minimum permissions required are as follows:

{
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "dns:recordset:delete",
                "dns:recordset:create",
                "dns:zone:create",
                "dns:recordset:get",
                "dns:nameserver:getZoneNameServer",
                "dns:zone:list",
                "dns:recordset:update",
                "dns:recordset:list",
                "dns:zone:get",
                "dns:zone:getDnssecConfig",
                "dns:zone:enableDnssecConfig",
                "dns:zone:disableDnssecConfig"
            ]
        }
    ]
}

To determine the Region parameter, refer to the endpoint page of huaweicloud. For example, on the international site, the Region name ap-southeast-1 is known to work.

If that doesn't work, log into Huaweicloud's website and open the API Explorer, find the ListPublicZones API, select a different Region and click Debug to try and find your Region.

New domains

If a domain does not exist in your Huawei Cloud account, DNSControl will automatically add it with the push command.

Feature Summary

• Provider Type

  • Official Support: ❌

  • DNS Provider: ✅

  • Registrar: ❌

• Provider API

  • Concurrency Verified: ❔

  • dual host: ✅

  • create-domains: ✅

  • get-zones: ✅

• DNS extensions

  • ALIAS: ❌

  • DNAME: ❔

  • LOC: ❌

  • PTR: ❌

  • SOA: ❌

• Service discovery

  • DHCID: ❔

  • NAPTR: ❌

  • SRV: ✅

  • SVCB: ❌

• Security

  • CAA: ✅

  • HTTPS: ❌

  • SMIMEA: ❔

  • SSHFP: ❌

  • TLSA: ❌

• DNSSEC

  • AUTODNSSEC: ✅

  • DNSKEY: ❔

  • DS: ❌