X-Git-Url: https://git.openstreetmap.org./dns.git/blobdiff_plain/3bd2f187edefa61f3056c1f560423e70ab1ae6fb..efdc7aa9f4b790b3d5e4390d5607b3d7179b88a4:/src/openstreetmap.js diff --git a/src/openstreetmap.js b/src/openstreetmap.js index 0cc1bd2..1bf2cfb 100644 --- a/src/openstreetmap.js +++ b/src/openstreetmap.js @@ -38,14 +38,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "@", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -54,14 +60,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "messages", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -70,14 +82,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "noreply", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -86,14 +104,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "otrs", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -102,14 +126,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "community", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -118,14 +148,20 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), label: "supporting", parts: [ "v=spf1", - "ip4:184.104.226.98", // fafnir ipv4 - "ip6:2001:470:1:b3b::2", // fafnir ipv6 - "ip4:193.60.236.0/24", // ucl external - "ip4:184.104.179.128/27", // amsterdam external - "ip6:2001:470:1:fa1::/64", // amsterdam external - "ip4:184.104.226.96/27", // dublin external - "ip6:2001:470:1:b3b::/64", // dublin external - "mx", // safety net if we change mx + "ip4:184.104.226.98", // fafnir ipv4 (he.net) + "ip6:2001:470:1:b3b::2", // fafnir ipv6 (he.net) + "ip4:87.252.214.98", // fafnir ipv4 (equinix) + "ip6:2001:4d78:fe03:1c::2", // fafnir ipv6 (equinix) + "ip4:193.60.236.0/24", // ucl external + "ip4:82.199.86.96/27", // amsterdam external (equinix) + "ip6:2001:4d78:500:5e3::/64", // amsterdam external (equinix) + "ip4:87.252.214.96/27", // dublin external (equinix) + "ip6:2001:4d78:fe03:1c::/64", // dublin external (equinix) + "ip4:184.104.179.128/27", // amsterdam external (he.net) + "ip6:2001:470:1:fa1::/64", // amsterdam external (he.net) + "ip4:184.104.226.96/27", // dublin external (he.net) + "ip6:2001:470:1:b3b::/64", // dublin external (he.net) + "mx", // safety net if we change mx "-all" ] }), @@ -155,8 +191,13 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), TXT("@", "_globalsign-domain-verification=W0buKB5ZmL-VwwHw2oQyQImk3I1q3hSemf2qmB1hjP"), // Facebook Business domain verification + TXT("@", "facebook-domain-verification=j5hix5i8r0kortfugqf2p9wx9x9by0"), + // Bluesky domain verification + + TXT("_atproto", "did=did:plc:i6llv7iwybeipknl57v4dalb"), + // Delegate MTA-STS policy for subdomains CNAME("_mta-sts.messages", QUALIFY("_mta-sts")), @@ -293,18 +334,6 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), CNAME("qgis.nominatim", "nominatim.geo.openstreetmap.org."), CNAME("qa-tile.nominatim", "longma.openstreetmap.org."), - // Taginfo server - - A("dribble", DRIBBLE_IPV4), - A("taginfo", DRIBBLE_IPV4), - AAAA("dribble", DRIBBLE_IPV6), - AAAA("taginfo", DRIBBLE_IPV6), - A("dribble.ams", DRIBBLE_INTERNAL), - A("dribble.oob", DRIBBLE_OOB), - - // HTTPS / SVCB records - HTTPS("taginfo", 1, ".", "alpn=h2"), - // Tile servers A("odin", ODIN_IPV4), @@ -346,9 +375,6 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), A("albi", ALBI_IPV4), AAAA("albi", ALBI_IPV6), - A("necrosan", NECROSAN_IPV4), - AAAA("necrosan", NECROSAN_IPV6), - CNAME("tile", "dualstack.n.sni.global.fastly.net."), CNAME("a.tile", "dualstack.n.sni.global.fastly.net."), CNAME("b.tile", "dualstack.n.sni.global.fastly.net."), @@ -363,31 +389,9 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), A("cmok", CMOK_IPV4), - // Site gateways - - A("ironbelly", IRONBELLY_IPV4), - AAAA("ironbelly", IRONBELLY_IPV6), - A("logstash", IRONBELLY_IPV4), - AAAA("logstash", IRONBELLY_IPV6), - A("tiler", IRONBELLY_IPV4), - AAAA("tiler", IRONBELLY_IPV6), - A("us-imagery", IRONBELLY_IPV4), - AAAA("us-imagery", IRONBELLY_IPV6), - A("a.us-imagery", IRONBELLY_IPV4), - AAAA("a.us-imagery", IRONBELLY_IPV6), - A("b.us-imagery", IRONBELLY_IPV4), - AAAA("b.us-imagery", IRONBELLY_IPV6), - A("c.us-imagery", IRONBELLY_IPV4), - AAAA("c.us-imagery", IRONBELLY_IPV6), - A("ironbelly.ams", IRONBELLY_INTERNAL), - A("ironbelly.oob", IRONBELLY_OOB), + CNAME("vector", "dualstack.n.sni.global.fastly.net."), - // HTTPS / SVCB records - HTTPS("tiler", 1, ".", "alpn=h2"), - HTTPS("us-imagery", 1, ".", "alpn=h2"), - HTTPS("a.us-imagery", 1, ".", "alpn=h2"), - HTTPS("b.us-imagery", 1, ".", "alpn=h2"), - HTTPS("c.us-imagery", 1, ".", "alpn=h2"), + // Site gateways A("fafnir", FAFNIR_IPV4), AAAA("fafnir", FAFNIR_IPV6), @@ -463,14 +467,9 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), A("ridley.ucl", RIDLEY_INTERNAL), A("ridley.oob", RIDLEY_OOB), - A("staging.blog", FUME_IPV4), - AAAA("staging.blog", FUME_IPV6), - // HTTPS / SVCB records HTTPS("blog", 1, ".", "alpn=h2"), HTTPS("foundation", 1, ".", "alpn=h2"), - HTTPS("staging.blog", 1, ".", "alpn=h2"), - HTTPS("birthday20", 1, ".", "alpn=h2"), // Matomo server @@ -489,25 +488,23 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), // Imagery servers - A("kessie", KESSIE_IPV4), - AAAA("kessie", KESSIE_IPV6), - A("agri", KESSIE_IPV4), - AAAA("agri", KESSIE_IPV6), - A("a.agri", KESSIE_IPV4), - AAAA("a.agri", KESSIE_IPV6), - A("b.agri", KESSIE_IPV4), - AAAA("b.agri", KESSIE_IPV6), - A("c.agri", KESSIE_IPV4), - AAAA("c.agri", KESSIE_IPV6), - A("os", KESSIE_IPV4), - AAAA("os", KESSIE_IPV6), - A("a.os", KESSIE_IPV4), - AAAA("a.os", KESSIE_IPV6), - A("b.os", KESSIE_IPV4), - AAAA("b.os", KESSIE_IPV6), - A("c.os", KESSIE_IPV4), - AAAA("c.os", KESSIE_IPV6), - A("kessie.oob", KESSIE_OOB), + A("agri", LOCKHEED_IPV4), + AAAA("agri", LOCKHEED_IPV6), + A("a.agri", LOCKHEED_IPV4), + AAAA("a.agri", LOCKHEED_IPV6), + A("b.agri", LOCKHEED_IPV4), + AAAA("b.agri", LOCKHEED_IPV6), + A("c.agri", LOCKHEED_IPV4), + AAAA("c.agri", LOCKHEED_IPV6), + A("os", LOCKHEED_IPV4), + AAAA("os", LOCKHEED_IPV6), + A("a.os", LOCKHEED_IPV4), + AAAA("a.os", LOCKHEED_IPV6), + A("b.os", LOCKHEED_IPV4), + AAAA("b.os", LOCKHEED_IPV6), + A("c.os", LOCKHEED_IPV4), + AAAA("c.os", LOCKHEED_IPV6), + // Prometheus server and munin redirect @@ -575,6 +572,26 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), A("oob1.dub", OOB1DUB_INTERNAL), + // Network gateways + + A("equinix-gw.ams", EQUINIXGWAMS_IPV4), + AAAA("equinix-gw.ams", EQUINIXGWAMS_IPV6), + A("equinix-gw-1.ams", EQUINIXGW1AMS_IPV4), + AAAA("equinix-gw-1.ams", EQUINIXGW1AMS_IPV6), + A("equinix-gw-2.ams", EQUINIXGW2AMS_IPV4), + AAAA("equinix-gw-2.ams", EQUINIXGW2AMS_IPV6), + A("equinix-osm.ams", EQUINIXOSMAMS_IPV4), + AAAA("equinix-osm.ams", EQUINIXOSMAMS_IPV6), + + A("equinix-gw.dub", EQUINIXGWDUB_IPV4), + AAAA("equinix-gw.dub", EQUINIXGWDUB_IPV6), + A("equinix-gw-1.dub", EQUINIXGW1DUB_IPV4), + AAAA("equinix-gw-1.dub", EQUINIXGW1DUB_IPV6), + A("equinix-gw-2.dub", EQUINIXGW2DUB_IPV4), + AAAA("equinix-gw-2.dub", EQUINIXGW2DUB_IPV6), + A("equinix-osm.dub", EQUINIXOSMDUB_IPV4), + AAAA("equinix-osm.dub", EQUINIXOSMDUB_IPV6), + // Bytemark machine, and the services which operate from it A("shenron", SHENRON_IPV4), @@ -623,6 +640,7 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), HTTPS("hot", 1, ".", "alpn=h2"), HTTPS("dmca", 1, ".", "alpn=h2"), // HTTPS("otrs", 1, ".", "alpn=h2"), - OTRS is not available using HTTPS/2 + HTTPS("birthday20", 1, ".", "alpn=h2"), A("naga.dub", NAGA_INTERNAL), A("naga.oob", NAGA_OOB), @@ -691,22 +709,56 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), AAAA("angor", ANGOR_IPV6), A("ladon", LADON_IPV4), AAAA("ladon", LADON_IPV6), - A("ascalon", ASCALON_IPV4), A("neak", NEAK_IPV4), A("meraxes", MERAXES_IPV4), AAAA("meraxes", MERAXES_IPV6), + // Donation site and new OSMF crm site + + A("donate", RIDLEY_IPV4), + A("support", RIDLEY_IPV4), + A("supporting", RIDLEY_IPV4), + + // HTTPS / SVCB records + HTTPS("donate", 1, ".", "alpn=h2"), + HTTPS("support", 1, ".", "alpn=h2"), + HTTPS("supporting", 1, ".", "alpn=h2"), + + A("lockheed", LOCKHEED_IPV4), + AAAA("lockheed", LOCKHEED_IPV6), + A("lockheed.ams", LOCKHEED_INTERNAL), + A("lockheed.oob", LOCKHEED_OOB), + A("tiler", LOCKHEED_IPV4), + AAAA("tiler", LOCKHEED_IPV6), + A("us-imagery", LOCKHEED_IPV4), + AAAA("us-imagery", LOCKHEED_IPV6), + A("a.us-imagery", LOCKHEED_IPV4), + AAAA("a.us-imagery", LOCKHEED_IPV6), + A("b.us-imagery", LOCKHEED_IPV4), + AAAA("b.us-imagery", LOCKHEED_IPV6), + A("c.us-imagery", LOCKHEED_IPV4), + AAAA("c.us-imagery", LOCKHEED_IPV6), + + // HTTPS / SVCB records + HTTPS("tiler", 1, ".", "alpn=h2"), + HTTPS("us-imagery", 1, ".", "alpn=h2"), + HTTPS("a.us-imagery", 1, ".", "alpn=h2"), + HTTPS("b.us-imagery", 1, ".", "alpn=h2"), + HTTPS("c.us-imagery", 1, ".", "alpn=h2"), + // Discourse server ("community") - A("gorwen", GORWEN_IPV4), - AAAA("gorwen", GORWEN_IPV6), + A("fume", FUME_IPV4), + AAAA("fume", FUME_IPV6), + A("fume.dub", FUME_INTERNAL), + A("fume.oob", FUME_OOB), - A("community", GORWEN_IPV4), - A("communities", GORWEN_IPV4), - A("c", GORWEN_IPV4), - AAAA("community", GORWEN_IPV6), - AAAA("communities", GORWEN_IPV6), - AAAA("c", GORWEN_IPV6), + A("community", FUME_IPV4), + A("communities", FUME_IPV4), + A("c", FUME_IPV4), + AAAA("community", FUME_IPV6), + AAAA("communities", FUME_IPV6), + AAAA("c", FUME_IPV6), // HTTPS / SVCB records HTTPS("community", 1, ".", "alpn=h2"), @@ -716,37 +768,37 @@ D(DOMAIN, REGISTRAR, DnsProvider(PROVIDER), CNAME("community-cdn", "dualstack.n.sni.global.fastly.net."), TXT("community", "google-site-verification=hQ8GZyj4KwnPqAX2oAzpbLrh6I5dfR08PSdL3icVkfg"), - A("forum", GORWEN_IPV4), - AAAA("forum", GORWEN_IPV6), + A("forum", FUME_IPV4), + AAAA("forum", FUME_IPV6), // HTTPS / SVCB records HTTPS("forum", 1, ".", "alpn=h2"), - A("gorwen.dub", GORWEN_INTERNAL), - A("gorwen.oob", GORWEN_OOB), + // Taginfo and Staging Blog Server - // Donation site and new OSMF crm site + A("tabaluga", TABALUGA_IPV4), + AAAA("tabaluga", TABALUGA_IPV6), + A("tabaluga.ams", TABALUGA_INTERNAL), + A("tabaluga.oob", TABALUGA_OOB), - A("donate", RIDLEY_IPV4), - A("support", RIDLEY_IPV4), - A("supporting", RIDLEY_IPV4), + A("staging.blog", TABALUGA_IPV4), + AAAA("staging.blog", TABALUGA_IPV6), // HTTPS / SVCB records - HTTPS("donate", 1, ".", "alpn=h2"), - HTTPS("support", 1, ".", "alpn=h2"), - HTTPS("supporting", 1, ".", "alpn=h2"), + HTTPS("staging.blog", 1, ".", "alpn=h2"), - // Spare servers + A("taginfo", TABALUGA_IPV4), + AAAA("taginfo", TABALUGA_IPV6), - A("fume", FUME_IPV4), - AAAA("fume", FUME_IPV6), - A("fume.dub", FUME_INTERNAL), - A("fume.oob", FUME_OOB), + // HTTPS / SVCB records + HTTPS("taginfo", 1, ".", "alpn=h2"), - A("tabaluga", TABALUGA_IPV4), - AAAA("tabaluga", TABALUGA_IPV6), - A("tabaluga.ams", TABALUGA_INTERNAL), - A("tabaluga.oob", TABALUGA_OOB), + // Spare servers + + A("dribble", DRIBBLE_IPV4), + AAAA("dribble", DRIBBLE_IPV6), + A("dribble.ams", DRIBBLE_INTERNAL), + A("dribble.oob", DRIBBLE_OOB), // Uptime site at StatusCake