Skip to content

panlm

route53

route53-cmd¶

func-create-hosted-zone-¶

执行下面命令创建 Hosted Zone，然后手工添加 NS 记录到上游的域名服务器 domain registrar 中 (create hosted zone, and then add NS records to upstream domain registrar)

func-create-hosted-zone

func-create-hosted-zone
# depends on: DOMAIN_NAME
# output: see output to setup NS record on upstream domain registry
# quick link: https://panlm.github.io/CLI/functions/func-create-hosted-zone.sh

function create-hosted-zone () {
    OPTIND=1
    OPTSTRING="h?n:"
    local DOMAIN_NAME=""
    while getopts ${OPTSTRING} opt; do
        case "${opt}" in
            n) DOMAIN_NAME=${OPTARG} ;;
            h|\?) 
                echo "format: create-host-zone -n DOMAIN_NAME "
                echo -e "\tsample: create-host-zone -n xxx.domain.com "
                return 0
            ;;
        esac
    done
    : ${DOMAIN_NAME:?Missing -n}

    aws route53 create-hosted-zone --name "${DOMAIN_NAME}." \
      --caller-reference "external-dns-test-$(date +%s)"

    local ZONE_ID=$(aws route53 list-hosted-zones-by-name --output json \
      --dns-name "${DOMAIN_NAME}." --query HostedZones[0].Id --out text)

    local NS=$(aws route53 list-resource-record-sets --output text \
      --hosted-zone-id $ZONE_ID --query \
      "ResourceRecordSets[?Type == 'NS'].ResourceRecords[*].Value | []")

    echo '###'
    echo '# get bash function from here: https://panlm.github.io/CLI/awscli/route53-cmd/#func-create-ns-record-'
    echo '# copy below output to add NS record on your upstream domain registrar'
    echo '###'
    echo 'DOMAIN_NAME='${DOMAIN_NAME}
    echo 'NS="'${NS}'"'
    echo 'curl -sL -o /tmp/func-create-ns-record.sh https://panlm.github.io/CLI/functions/func-create-ns-record.sh'
    echo 'source /tmp/func-create-ns-record.sh'
    echo 'create-ns-record -n ${DOMAIN_NAME} -s "${NS}"'
    echo ''
}

func-create-ns-record-¶

create host zone in your child account and get NS (previous chapter)
assume to your parent account to execute this function to add NS record to upstream route53 host zone

func-create-ns-record

func-create-ns-record
# depends on: DOMAIN_NAME NS_RECORD
# output: N/A
# quick link: https://panlm.github.io/CLI/functions/func-create-ns-record.sh

function create-ns-record () {
    OPTIND=1
    OPTSTRING="h?n:s:"
    local DOMAIN_NAME=""
    local NS=""
    while getopts ${OPTSTRING} opt; do
        case "${opt}" in
            n) DOMAIN_NAME=${OPTARG} ;;
            s) NS=${OPTARG} ;;
            h|\?) 
                echo "format: create-host-zone -n DOMAIN_NAME -s \"NS_RECORDS\" "
                echo -e "\tsample: create-host-zone -n xxx.domain.com -s \"ns-xx.awsdns-xx.com ns-xx.awsdns-xx.com\" "
                return 0
            ;;
        esac
    done
    : ${DOMAIN_NAME:?Missing -n}
    : ${NS:?Missing -s}

    # check NS number
    local NS_NUM=$(echo $NS |xargs -n 1 |wc -l)
    if [[ ${NS_NUM} -eq 1 ]]; then
        echo "your NS is: "${NS}
        echo 'typical NS record should has more than one record'
        echo 'use double quotes when you use variable for -s '
        create-ns-record -h
    fi

    PARENT_DOMAIN_NAME=${DOMAIN_NAME#*.}
    ZONE_ID=$(aws route53 list-hosted-zones-by-name \
    --dns-name "${PARENT_DOMAIN_NAME}." \
    --query HostedZones[0].Id --output text)

    envsubst >/tmp/ns-route53-record.json <<-EOF
{
  "Comment": "UPSERT a record for poc.xxx.com ",
  "Changes": [
    {
      "Action": "UPSERT",
      "ResourceRecordSet": {
        "Name": "${DOMAIN_NAME}",
        "Type": "NS",
        "TTL": 172800,
        "ResourceRecords": [
        ]
      }
    }
  ]
}
EOF

    for i in ${NS}; do
        cat /tmp/ns-route53-record.json |jq '.Changes[0].ResourceRecordSet.ResourceRecords += [{"Value": "'"${i}"'"}]' \
            |tee /tmp/ns-route53-record-tmp.json
        mv -f /tmp/ns-route53-record-tmp.json /tmp/ns-route53-record.json
    done

    aws route53 change-resource-record-sets --hosted-zone-id ${ZONE_ID} --change-batch file:///tmp/ns-route53-record.json

    aws route53 list-resource-record-sets --hosted-zone-id ${ZONE_ID} --query "ResourceRecordSets[?Name == '${DOMAIN_NAME}.']"
}

func-create-outbound-resolver¶

function create-outbound-resolver () {
    OPTIND=1
    OPTSTRING="h?s:"
    local SG_ID=""
    while getopts ${OPTSTRING} opt; do
        case "${opt}" in
            s) SG_ID=${OPTARG} ;;
            h|\?) 
                echo "format: create-outbound-resolver -s security_group_id "
                echo -e "\tsample: create-outbound-resolver -s sg-xxx "
                return 0
            ;;
        esac
    done
    : ${SG_ID:?Missing -s}

    # find 2 subnet id in vpc


    # RANDOM
    REQUEST_ID=$(TZ=EAT-8 date +%Y%m%d-%H%M%S)
    aws route53resolver create-resolver-endpoint \
        --creator-request-id ${REQUEST_ID} \
        --name my-outbound-endpoint \
        --security-group-ids ${SG_ID} \
        --direction OUTBOUND \
        --ip-addresses SubnetId=${SUBNET_ID[0]} SubnetId=${SUBNET_ID[1]}  \
        --resolver-endpoint-type IPV4 \
        --protocols "Do53" "DoH"

}

create cname record¶

refer: link
sample: acm-cmd

insert TXT record with multi values¶

{
    "Comment": "Update record to add new TXT record",
    "Changes": [
        {
            "Action": "UPSERT",
            "ResourceRecordSet": {
                "Name": "@.panlm.com.",
                "Type": "TXT",
                "TTL": 300,
                "ResourceRecords": [
                    {
                        "Value": "\"test1=1\""
                    },
                    {
                        "Value": "\"test2=1\""
                    }
                ]
            }
        }
    ]
}

aws route53 change-resource-record-sets \
  --hosted-zone-id Z07xxxxZD1 \
  --change-batch file://a.json

refer¶