This is an old revision of the document!
Table of Contents
Infoblox Misc
Set prompt to something that isn't the default Infoblox.
You have to run this command on the Grid Manager and it will then apply to all members of the Grid when you SSH into them. It will be just the hostname (not the FQDN).
Use the exact command below. NIOS will then use this config and will display the actual username and actual hostname when you log in to a specific system.
set prompt user@hostname
set prompt user@ip
On the DNS Dashboards, the measured figure is “Responses per second” NOT “Queries per second”. “Queries per second” needs the reporting server.
Resetting NIOS Member
As per KB Article
If you can't log into an NIOS appliance, you can reset using the emergency prompt.
When booting press the Esc key once (and only once) to get to the emergency prompt (there is a five second window for you to press this)
Enter the command ‘reset database’ from the Emergency prompt to erase and reset the database on the appliance (NOTE: *All previous data on the appliance will be lost and cannot be recovered*).
Replacing NIOS Member
Memory on 9.0
Prior to NIOS 9.0, member cache was not counted in memory count because it was in large pages of RAM. As of NIOS 9.0, member cache is included in memory count which accounts for jumps in memory usage after upgrading to NIOS 9.0.
DNS Integrity Check
DNS Integrity Check helps monitor Glue records for configuration change (DNS Hijacking) here.
Exporting Grid Data
Grid > Grid Manager > Members > Download Icon black arrow above member table
- Export visible data
- Export Members data in Infoblox CSV Import Format
GRID_MEMBER_LIST.csv is when you export visible data. This exports data from the columns that are visible in the UI and in the order that the columns are arranged in in the UI. The following is an example of what can be exported.
- Member Name
- Status
- IP Address (IPv4 & IPv6) LAN1 and MGMT
- Service Status
- Description
- Host Platform
- Serial Number
- Hypervisor
Members.csv is when you export all data in CSV format. (Does not provide DB usage and does not provide serial numbers and does not provide service status)
- Name
- Upgrade Group
- Full IP details - LAN1/LAN2/MGMT/HA/Loopbacks/VLAN/netmask/gateway/DSCP
- Static routes
- Time zone
- MGMT SSH Access
- MGMT VPN
- NIC Failover
- Platform (Infoblox/vNIOS)
- BGP/OSPF Config
- Comment
- HA or Not-HA
- Enable Query
- Enable SNMP/SNMP details/Trap Receiver
- Enable Member HTTP Redirect
Version Check
Bugs aside, you can normally run the following without authentication
curl -k https://192.168.1.53/nios_version.txt
Credentials can be done with
curl -k -u admin:infoblox -X GET "https://192.168.1.53/nios_version.txt"
Shared Secret
Only change grid shared secret when all existing members of the Grid are online. That way, when the Shared Secret is changed, the online Grid members will have the new value synced to them. Any offline members will boot and be unable to join (and have to rejoin).
Passwords
NIOS applies a salted SHA512 hash to passwords when storing local admin details. (used to be SHA256 for NIOS 8.4 and older)
Audit Rolling
The option Enable Audit Log Rolling - When you select this option, the appliance rolls the audit log when it reaches 100 MB. IF YOU DON'T, Audit will just override once it maxs out at 100Mb (rolling is when you archive the 100mB file to .1, .2, etc.to .9
Service-related files are missing
For error message on NIOS screen - “Service-related files are missing. Please re-install NIOS version via Downgrade operation.”
Often caused by people installing the resizable version of NIOS. Long story short… never do that.
There is a KB article on it.
CSV Import
API calls to import CSV in 5000 line chunks, check performance from 8.6.3 onwards.
SSH Access
Grid/Member Settings > Security > Advanced
Enable Remote Console Access= Enable SSH on the box so that users can log in (assuming the user accounts have appropriate permissions to CLI).Enable Support Access (Status Shown)= same as “set support_access”. If you enable and then Save&Close and then re-open, you will see a small code that can be provided to Infoblox support so that a root session key can be created. If you have this enabled but do NOT have Remote Console Access enabled, then you can't access the box by SSH and will have to use local console. This option is separate to “Enable Remove Console Access” because, in theory, you might want to enable root access on a member for support to troubleshoot but you might not be permitted CLI access. Disabling Remote Console access and enabling this gives you the ability to provide support with the access code without having to access the console locally. Support can use this to generate the appropriate root password and access keys.
Memory Footprint Usage
Recursive client queries take up about 20Kb per query.
Disable Telemetry
BloxConnect is a useful source of telemetry to help Infoblox develop and improve NIOS (datasheet). It is recommended to enable it as it also allows your account team at Infoblox to provide better service by providing them a summary of the features you have enabled.
set bloxconnect disable/enable
show bloxconnect
- In the NIOS GUI Mode → Grid Properties Editor or Grid Member properties→ Toggle Advanced Mode → CSP Config → Advanced (Tab) and uncheck the “BloxConnect Data Collection and Opt-in Notice”
- Then log into NIOS CLI and run these commands
set maintenancemodeset cloud off
Latency
From here.
At a minimum, there must be 256 Kbps (kilobits per second) bandwidth between the Grid Master and each member, with a maximum round-trip delay of 500 milliseconds. For ongoing database updates, the amount of data sent or received is 15 Kb for every DDNS update, and 10 Kb for every DHCP lease -offer/renew. The baseline amount for heartbeat and other maintenance traffic for each member is 2 Kbps. Measure the peak DNS and DHCP traffic you see in your network to determine the bandwidth needed between the Grid Master and its members for this activity. For example, you might decide to place your Grid members in the locations shown in the below figure.
(You want at least 2Mbps of bandwidth between any two members.)
Logging
Eco System licence, use the new one IB-SWTL-SECECO-BIZ and that gives you CSP access to deploy the Cloud Data Connector (CDC). This can be better for getting logs from DNS server to reporting server when query logging is enabled.
Disk
For VM's running NIOS 9.0.1 or higher the fixed size has been changed from 250 GB to 500 GB to accommodate the requirements of high-end deployments by default. The minimum resizable image has been changed to 150 GB and it can be scaled up to 2.5 TB.
You do not need to resize previous 250 GB images to upgrade NIOS. Changing the disk size has no effect on the previously created VM partitions or file systems. You can only change the disk size when the VM is first created using a resizable image.
The following table shows the results of the 'show disk' command and what you will see based on the disk size
| Size | Output of Capacity |
|---|---|
| 60G | |
| 150G | 53Gb |
| 250G | |
| 500G |
