DNS and DHCP Consolidation Across Lab Subnets

DNS Role Restructuring

The lab.franklin Ansible collection's DNS roles (dns_master, dns_slave) require Jinja2 template consolidation. BIND9 configuration fragments have grown scattered across multiple role directories with overlapping forward-zone definitions and inconsistent rfc1918 reverse entries for the `10.10.x.0/24` subnets. A single authoritative zone-file template per subnet eliminates drift between master and slave configurations.

DHCP Lease Management

ISC DHCP server lease tables across the lab require regular auditing. The current approach — manual lease file inspection on the primary DHCP host — is unsustainable as the host count grows. Moving to a centralized lease database with periodic reconciliation against active ARP tables provides an automated discovery mechanism: hosts that appear in ARP but not in the DHCP lease table indicate potential address leaks or unauthorized static assignments.

Port Conflict Analysis

BIND9 (port 53/UDP+TCP) and Rsyslog (port 514/TCP+UDP) share physical hosts on several lab nodes. The port allocation matrix was audited today; no conflicts were found in the active topology, but the head2 retirement removed two hosts from the inventory, reducing buffer capacity for future consolidation projects.

Ansible Role Targets

• dns_master: BIND9 zone-file template refactoring (in progress).
• dns_slave: Secondary zone transfer verification playbook update.
• ntp_server / ntp_client: Configuration drift analysis against the centralized NTP hierarchy on stargate.