From 3289206cf31c3d61a54710f275d0b7806a62d74d Mon Sep 17 00:00:00 2001
From: Andrew Watson <andrewmoorewatson@gmail.com>
Date: Tue, 8 Apr 2014 23:56:26 -0400
Subject: [PATCH] new guide for setting up bind and Consul to play nice

---
 .../docs/guides/forwarding.html.markdown      | 61 +++++++++++++++++++
 .../source/docs/guides/index.html.markdown    |  2 +
 2 files changed, 63 insertions(+)
 create mode 100644 website/source/docs/guides/forwarding.html.markdown

diff --git a/website/source/docs/guides/forwarding.html.markdown b/website/source/docs/guides/forwarding.html.markdown
new file mode 100644
index 0000000000..a0c3c343ac
--- /dev/null
+++ b/website/source/docs/guides/forwarding.html.markdown
@@ -0,0 +1,61 @@
+---
+layout: "docs"
+page_title: "Forwarding"
+sidebar_current: "docs-guides-forwarding"
+---
+
+# Forwarding DNS queries from Bind To Consul
+
+In order to not have to run Consul as root and bind to port 53 it's best if 
+it's paired with Bind. 
+
+In this example, Bind and Consul are running on the same machine
+
+### DNSSEC
+
+First, you have to disable DNSSEC so that Consul and Bind can communicate
+
+    options {
+        listen-on port 53 { 127.0.0.1; };
+        listen-on-v6 port 53 { ::1; };
+        directory       "/var/named";
+        dump-file       "/var/named/data/cache_dump.db";
+        statistics-file "/var/named/data/named_stats.txt";
+        memstatistics-file "/var/named/data/named_mem_stats.txt";
+        allow-query     { localhost; };
+        recursion yes;
+
+        dnssec-enable no;
+        dnssec-validation no;
+
+        /* Path to ISC DLV key */
+        bindkeys-file "/etc/named.iscdlv.key";
+
+        managed-keys-directory "/var/named/dynamic";
+    };
+
+    include "/etc/named/consul.conf";
+
+Then we set up a zone for our Consul managed records in consul.conf:
+
+    zone "consul" IN {
+        type forward;
+        forward only;
+        forwarders { 127.0.0.1 port 8600; };
+    };
+
+We can extend this even further to make separate zones for different data centers / Consul clusters.
+
+    zone "n-california.consul" IN {
+        type forward;
+        forward only;
+        forwarders { 172.16.0.15 port 8600; 172.16.0.16 port 8600; };
+    }
+
+    zone "oregon.consul" IN {
+        type forward;
+        forward only;
+        forwarders { 172.24.0.1 port 8600; 172.24.0.1 port 8600; };
+    }
+
+
diff --git a/website/source/docs/guides/index.html.markdown b/website/source/docs/guides/index.html.markdown
index 7bd1de6f58..11241ec05a 100644
--- a/website/source/docs/guides/index.html.markdown
+++ b/website/source/docs/guides/index.html.markdown
@@ -22,3 +22,5 @@ The following guides are available:
  * [External Services](/docs/guides/external.html) - This guide covers registering
  an external service. This allows using 3rd party services within the Consul framework.
 
+ * [Forwarding](/docs/guides/forwarding.html) DNS queries from Bind to Consul
+