Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

API & Integration, DevOps,NetOps,SecOps

Reply

How to create DS record using WAPI?

New Member
Posts: 5
1686     0

I have a requirement to create DS record through a WAPI call. The corresponding object for DS record is 'record:ds' and as I understand this object does not support Create or Modify operation. Can anybody guide me if there is any other object which I need to refer here or there are any alternative methods to create the DS record?

Also what all attributes are required to create a DS record? Is it FQDN & DS string?

Re: How to create DS record using WAPI?

Adviser
Posts: 181
1687     0

Hi,

 

From the documentation, this is what I have -

The DS resource records are automatically generated upon the signing of the child zone of an authoritative zone residing on the appliance.

 

So, if you sign the child zone, this record will automatically be created for you. For samples regarding the APIs for signing the zone, you can refer to page 35 here: https://www.infoblox.com/wp-content/uploads/infoblox-deployment-infoblox-rest-api.pdf

 

Hope this helps,

Regards,

Krishna

Re: How to create DS record using WAPI?

New Member
Posts: 5
1687     0

Hi,

Thanks for responding. How can the child zone be obtained from the authoritative zone? Also around the signing of a zone I could find the following where we need to call a function. Is this the 1 which I need to use?

 

curl -k -u admin:infoblox -H 'content-type: application/json' -X PUT "https://grid-master/wapi/v2.11/ zone_auth/ZG5zLnpvbmUkLl9kZWZhdWx0LmNvbS5kZW1v:demo.com/default?_function=dnssec_operation" -d '{"operation":"SIGN"}' 

 

So is it the case by having the FQDN only and  by passing it as a child zone & signing the same we can achieve this? I have also the DS string with me as below. Will that be of any use?

 

DS String - 
8185 8 2 8C79EE584A6E8C836240A1B91DDDA2A700917C0B663371A2B69C32C0 3AF6B4A6

 

 

Showing results for 
Search instead for 
Did you mean: 

Recommended for You