Infoblox

Configuration

This provider is for Infoblox NIOS DDI appliances via the WAPI (Web API). To use this provider, add an entry to creds.json with TYPE set to INFOBLOX.

Example:

creds.json

{
  "infoblox": {
    "TYPE": "INFOBLOX",
    "host": "https://grid-master.example.com",
    "username": "dnscontrol",
    "password": "your-password",
    "view": "default",
    "wapi_version": "2.12"
  }
}

Parameters

Field	Required	Default	Description
host	Yes		Base URL of the Infoblox Grid Master (e.g. https://grid-master.example.com)
username	Yes		WAPI username
password	Yes		WAPI password
view	No	default	DNS view to manage
wapi_version	No	2.12	WAPI version string
tls_skip_verify	No	false	Skip TLS certificate verification
ca_cert	No		Path to a custom CA certificate file (PEM format)

Usage

An example configuration:

dnsconfig.js

var REG_NONE = NewRegistrar("none");
var DSP_INFOBLOX = NewDnsProvider("infoblox");

D("example.com", REG_NONE, DnsProvider(DSP_INFOBLOX),
    A("test", "1.2.3.4"),
    AAAA("test6", "2001:db8::1"),
    CNAME("www", "test.example.com."),
    MX("@", 10, "mail.example.com."),
    TXT("@", "v=spf1 -all"),
    SRV("_sip._tcp", 10, 60, 5060, "sip.example.com."),
    CAA("@", "issue", "letsencrypt.org"),
    PTR("4.3.2.1", "host.example.com."),
);

Supported record types

The following record types are supported:

• A

• AAAA

• CAA

• CNAME

• MX

• PTR

• SRV

• TXT

Limitations

• NS records are not supported. Infoblox requires an addresses field (nameserver IPs) when creating NS delegation records, which DNSControl does not provide.

• Zones must be pre-created. DNSControl cannot create zones in Infoblox; they must already exist in the configured DNS view.

• TXT records are limited to 255 bytes. Infoblox does not support multi-string TXT records or single strings longer than 255 bytes.

• Empty TXT records are rejected.

• TXT records with backslashes are not supported.

• Concurrent operations are not supported. The provider processes changes sequentially.

Activation

DNSControl connects to the Infoblox WAPI using HTTP Basic Authentication. Create a local user account on the Infoblox Grid Master with permissions to manage DNS records in the target zone and view.

The minimum required permissions are:

• Read/Write access to the DNS zone(s) you want to manage

• Read access to zone_auth objects (for zone lookup and SOA TTL retrieval)

New domains

DNSControl cannot create new zones in Infoblox. Zones must already exist in the configured DNS view before DNSControl can manage them.

Feature Summary

• Provider Type

  • Official Support: ❌

  • DNS Provider: ✅

  • Registrar: ❌

• Provider API

  • Concurrency Verified: ✅

  • dual host: ❌

  • create-domains: ❌

  • get-zones: ❌

• DNS extensions

  • ALIAS: ❌

  • CSYNC: ❌

  • DNAME: ❌

  • LOC: ❌

  • PTR: ✅

  • RP: ❌

  • SOA: ❌

• Service discovery

  • DHCID: ❌

  • NAPTR: ❌

  • SRV: ✅

  • SVCB: ❌

• Security

  • CAA: ✅

  • HTTPS: ❌

  • OPENPGPKEY: ❌

  • SMIMEA: ❌

  • SSHFP: ❌

  • TLSA: ❌

• DNSSEC

  • AUTODNSSEC: ❔

  • DNSKEY: ❌

  • DS: ❌