Install DNS Relay using VMware ESXi
Follow this post to install the DNSFilter Relay via VMware ESXi.
Consult VMware's documentation for additional settings details and requirements.
Prerequisites for setup
- Recommended specs: 64-bit 2-core CPU; 2GB of RAM
- Open these ports at the NSG level:
- Port 53: Used for DNS (Domain Name System) traffic
- Port 853: Used for DNS over TLS (DoT) traffic
- Port 443: Used for HTTPS (Hypertext Transfer Protocol Secure) traffic
- Create a Site in the DNSFilter dashboard to associate the Relay with. Copy the Site Secret Key from the Relay Install tab to complete the installation
Setup the Relay
- Download the Image: VMware 22.04, 3.7GB (ova)
Login Credentials:
Username: dnsfilter
Password: ChangeMeNow! - Import the Image file into VMware
- Update the default password using this command:passwd
- Use our in-app config tool to edit the relay.conf file or manually edit the relay.conf file using this command:sudo nano /etc/relay/relay.conf
- Edit these fields (crtl+o):
- Name. Must match the Site name set in the DNSFilter dashboard
- Site Secret Key. Copied from the dashboard
- Save these changes (return/enter) and exit the file (crtl+x)
- Edit these fields (crtl+o):
- Confirm network settings are configured to run with the Relay: sudo nano /etc/netplan/00-installer-config.yaml
- Modify ethernet to the correct interface name to be discovered on the host. The most common within ESXi is ens33
- Choose how the network should obtain an IP:
- Use DHCP (default). This setting will work as long as the network firewall has a permanent DHCP lease for the MAC of the Virtual NIC of the ESXi container
-
Assign a Static IP. Update the .yaml values:
- Add # before
dhcp4: true
- Remove # before the next five lines
- Update
addresses
to reflect the Static IP e.g.192.168.1.15/24
in the above image becomes172.16.0.44/24
- Update
gateway4
to the appropriate network gateway IP e.g.192.168.1.1
in the above image becomes172.16.0.1
- Add # before
- Save the file
- Run these commands as root to enable the changes. They will stick across boots:
sudo netplan generate
sudo netplan apply
- Modify ethernet to the correct interface name to be discovered on the host. The most common within ESXi is ens33
-
Run these commands:
sudo systemctl enable docker.service
sudo systemctl start docker.service
- Restart the VM
- Run the
ifconfig
command to make sure it is picking up the correct IP - Test the connection. Troubleshoot any errors as needed
-
Start the docker relay with this command:
sudo docker start relay1 relay2
- Confirm the status of the relays using this command:sudo docker ps
The setup is now complete and the Relay will begin filtering DNS traffic.
Users running Vsphere that receive an error message during deployment see this post to resolve the issue.
Please sign in to leave a comment.
Comments
0 comments