unbound: Add better failover config

group_vars/dnagw.yml

@@ -12,6 +12,18 @@ network_vip_interfaces:
     netmask: 255.255.252.0
     pass: "{{ vip10_pass }}"
     priority: 120
+  - device: vio0
+    vhid: 11
+    ipaddr: 172.20.20.11
+    netmask: 255.255.252.0
+    pass: "{{ vip11_pass }}"
+    priority: "{{ vip11_priority }}"
+  - device: vio0
+    vhid: 12
+    ipaddr: 172.20.20.12
+    netmask: 255.255.252.0
+    pass: "{{ vip12_pass }}"
+    priority: "{{ vip12_priority }}"
 network_ether_interfaces:
   - device: vio1
     proto: none

host_vars/dna-gw01.home.foo.sh.yml

@@ -10,3 +10,5 @@ network_interfaces:
   - device: vio1
     vlan: 103
     proto: none
+vip11_priority: 240
+vip12_priority: 120

host_vars/dna-gw02.home.foo.sh.yml

@@ -10,3 +10,5 @@ network_interfaces:
   - device: vio1
     vlan: 103
     proto: none
+vip11_priority: 120
+vip12_priority: 240

roles/unbound/templates/unbound.conf.dna-gw01.home.foo.sh.j2

@@ -8,6 +8,10 @@ server:
 
     interface: 172.20.20.10@53
     interface: 172.20.20.10@853
+    interface: 172.20.20.11@53
+    interface: 172.20.20.11@853
+    interface: 172.20.20.12@53
+    interface: 172.20.20.12@853
     interface: 172.20.21.1@53
 
     tls-service-key: {{ tls_private }}/dns.home.foo.sh.key

roles/unbound/templates/unbound.conf.dna-gw02.home.foo.sh.j2

@@ -8,6 +8,10 @@ server:
 
     interface: 172.20.20.10@53
     interface: 172.20.20.10@853
+    interface: 172.20.20.11@53
+    interface: 172.20.20.11@853
+    interface: 172.20.20.12@53
+    interface: 172.20.20.12@853
     interface: 172.20.21.2@53
 
     tls-service-key: {{ tls_private }}/dns.home.foo.sh.key