Recently active topics

I’ve been meaning to share this for a while…..One of the things that makes Micetro really useful when you start using it for Orchestration of your DNS and DHCP infrastructure is the centralised audit log for all DDI related changes. i.e. Who did what when!Normally this is only accessible via the Micetro GUI. However as the GUI is built on the API this can also be exposed using the GetHistory API command. In order to help illustrate this I’ve written a simple python script which can be run/scheduled from within Micetro which can read the audit log and send this to an external syslog server. Under the hood it uses the Python logger module which can support many other formats including HTTP and SMTP for example.https://github.com/worrabkram/audit2syslogPlease note…This is a personal project not linked to BlueCat.No warranty or support implied.Hopefully you find this usefulMark

Hi all, I just wanted to post a quick message that I’ll be out of office for most of March, from Mar 6 — Mar 28th. In my absence, please contact ​@amartyn who will be covering. You’re in great hands. Alternatively, you can also email community@bluecatnetworks.com. —Quick updates before I head out: Integrity Beta Integrity 26.1 starts on March 9th and emails go out to you all on March 10th. Once you’re approved and in the Integrity 26.1 Beta Group, you’ll need to submit a form to get the license keys from the product management team. If you need specific help with the beta and are having trouble you can email integrity-feedback@bluecatnetworks.com Integrity User Group Integrity user group will skip March and be back at the end of April. Thank you to everyone who provided feedback in the survey. Expect a little more structure for the next user group. We are also considering opening up topics to be submitted ahead of time. Does the community like the idea of submitting topics? Please let

Hi, I’am currently testing Openstack as a VMware alternative in my company. Under VMware, we currently use the Bluecat API to automatically reserve IP addresses and set DNS names. Is there a Openstack Adaptive Plugin / Neutron Driver from Bluecat with the same features?The article about the Adaptive Plugin only refers to “Openstack Train”, which is quite old and end-of-life since 2024:https://bluecatnetworks.com/integrations/openstack/I also found a GitHub page, but it hasn't been updated since 2018:https://github.com/bluecatlabs/bluecat-openstack-driversCan one of these still be used for a current Openstack version (2025.2 or newer), or does Bluecat offer another solution for automating IPAM in OpenStack?regardsMichael

Is there documentation regarding how one authenticates to <address-manager-ip>:10048/metrics to access the Prometheus metrics exporter?  Running 25.1.2, it appears to be asking for/requiring a client certificate, but I can’t find any documentation about how one configures this.

BlueCat introduces BlueCat Horizon, a SaaS-first Intelligent NetOps platform for cross-domain network operations The platform delivers a unified control plane for DNS, DHCP, IPAM, security, and observability, empowering rapid, automated action across networks BlueCat Horizon offers a shared control plane for network services, policy, identity, telemetry, analytics, automation, and AI-assisted intelligence. This unified approach platform lets teams apply consistent governance, correlate signals, surface prioritized insights, and take coordinated action across DNS, DHCP, IPAM, security, and network performance, enabling networks to automatically adapt and remediate issues as conditions change, without forcing infrastructure replacement or disruptive migrations.Built for cloud-first and hybrid environments, the platform’s initial offering is Horizon DDI. It provides a common orchestration plane for third-party infrastructure and BlueCat-native solutions. By managing existing Microsoft Act

Hi,i have a problem with my bind server. (Full disclosure, it’s not with my BDDS installation but a non-bluecat named server).When i try to resolve www.semigator.de thouth this server, it works fine. But  after some time, it stops working. It’s not a general Problem, other stuff is still possible to resolve. If i flush the cache, it instanstly works again. I have a suspiction why that is, but i wanted to check with someone. My setup is the following: I run the official docker hub image from isc (https://hub.docker.com/r/internetsystemsconsortium/bind) in v9.20. It runs on an RHEL 9.7 with docker-ce.x86_64 3:29.1.2-1.el9. The container runs it’s networking in host mode (so it attaches directly to port 53 of the OS).Important, i do not have any IPv6 IPs. Thus i overrule the entrypoint with the -4 Option:/usr/sbin/named -f -c /etc/bind/named.conf -u bind -4 When i inspect the cache after first resolving, the nameservers each have two IPs, an v4 and one v6. The v4 has a TTL of 3600, and th

Several years ago I asked BC about whether they would write/provide an octodns Provider module/plugin, to be on par on the dozen or so other Providers. E.g. Infoblox, Cloudfare, DigitalOcean, Route53 etc. See: https://github.com/octodns/octodns-route53 I was told: “No but we can quote you on a price”I wrote my own first using the v1 API then v2. I’ve recently put it up on github if others are interested.https://github.com/quistian/octodns-bluecatI’ve found octodns to be a very useful method to synchronize many authoritative DNS servers, using a central YAML data store.   

In certain contexts e.g. Azure Authoritative DNS Resource,  there is no granularity at the RR level.So given a larger institution have multiple groups using the same Azure Tenant,  there is no way to limi who can view/change/add RRs.  I.e. using the Azure Dashboard, which has a nice GUI where one can view RRs,  all users can see all the records. Question: Does RBAC help us solve the  problem, Given we have a one to one representation of our data in Integrity?Answer: To the best of my knowledge, No.A View combined with RBAC does not allow granularity down to the RR level.So do others have any solutions to this “problem”. I’ve used artificial subdomain names to branch out the ownership of different groups. E.g. in the case of Azure Resource Domain Names:privatelink.openai.azure.com.345 --→ Engineering Groupprivatelink.mysql.database.azure.com.1123 -→ Web Development and OperationsOne can also put the artificial group names at the other end of the FQDN and use more readable tokens:eng.pri

I’m curious if anyone can speak to what the limiting factors are on BAM’s ability to process notifications?  We’ve experienced some occurrences where it looks like the notification processing has hit a SQL block for a period of time, causing PNA file backlogs on the BAM.  Once the block clears, it takes BAM a certain amount of time to catch back up.  Observing the appliance while it does so, it seems a single postmaster process CPU-bound against a single thread - so depending on the size of the backlog it can take quite a bit of time to catch up, even though the BAM overall is 98% idle.This notification processing is really the only performance-related concern I currently have for our BAMs - and it would be awesome if  notification processing could be improved in such a way as to better consume the available hardware resources.

Are there any plans to support optimized bulk data export via the v2 API, such as was introduced with the v1 exportEntities method?  We have several integrations and reporting routines that depend on exportEntities and I’m trying to plan for when the v1 API goes away.Also, are there any plans to expand the CSV import functionality such that one can import IPv4/6 objects across multiple parents in one action?  Always needing to know the parent has always been a bit of a nag when working with the BAM API and this is still reflected in the UI CSV imports.  Any plans for CSV imports of additional object types?  Competing products’ abilities in the area of object import have a leg up on Bluecat in my experience.