Replace ISC dhcpd

Keep BIND. Option 6 stays on the resolvers your laptops already ask.

If you are tired of subnet/range/host in conf on one side and dhcpd.leases on the other, Lattice puts both in one catalog. dhcpd reads those rows. Search finds the MAC instead of grepping the lease file. Discover on one node and Ack on another is the normal path — same pool.

On-prem · Ubuntu tarball · Community: 1,000 managed IPs · No phone-home

Community is the install with no license file. A 30-day Starter trial is in the portal. List prices are on Pricing.

The plan usually lives in a sheet (or phpIPAM). Offers still come from Windows, ISC, or Kea. You keep those stories aligned yourself.

Prefixes, pools, reservations, and leases are one catalog. dhcpd serves those rows; the console writes them. There is no second copy to sync. A/PTR follow the grant into the DNS you already run — Ack does not wait on a nameserver.

Cutover

Lattice does not ingest dhcpd.conf or dhcpd.leases. Read subnet, range, and host { hardware; fixed-address }, map them, POST /api/v1. Small dnsmasq files: enter them in Addresses. Shared-network and allow/deny pools still need a human pass.

Playbook: Migrate · HA is not Microsoft failover — three-node VIP.

A Tuesday after cutover

ISC keeps intent in conf and reality in the lease file. Lattice has one catalog, so Work can name the failure.

  1. Helpdesk

    Paste a MAC suffix → search lands on the lease. Neteng is not the lookup API.

  2. Neteng

    Work names the queue when a laptop will not get an address (Relays, Why NAK, Wrong MAC) — no capture first, no primary to restart. Occupancy answers who held an IP last Tuesday as every remaining hold, as-of a day, CSV. Reserve a printer on .10 forever the same way: the reservation you save is the next Offer.

ISC dhcpd compared with Lattice
TopicISC dhcpdLattice
Plan and leasesconf + lease fileOne catalog
Scale-out / failoverPeer / split poolsSame pool on every node (Starter: extra dhcpd + three-node VIP). A 30-day Starter trial is in the portal.
Find a MACgrep dhcpd.leasesConsole search
Who held this IPgrep dhcpd.leasesEvery hold. As-of a day. CSV.
DNSScripts / nsupdate / BYOA/PTR after Ack into DNS you keep
CutoverRead conf host/subnet/range → map → API (no conf/lease ingest)Dump → map → API

What hurts in ISC dhcpd

conf is the plan, the lease file is reality

A host block is intent. dhcpd.leases is what happened. They drift. grep is the helpdesk.

Failover is a peer

Split pools, primary/secondary. Request on the node that did not Offer is a special case. Lattice is the opposite: that is normal.

DNS is a script

nsupdate on a hook, or you do not do it. Ack should not wait either way — but the plan and the name should not live in two files.

What Lattice does

No dhcpd.conf for pools

Pools, reservations, and excludes are IPAM rows. Every dhcpd process loads the same catalog.

Search the MAC

Console search lands on the reservation or the lease. Cisco dotted MAC works.

Last three octets are enough. Cisco dotted form works.

Last three octets are enough. Cisco dotted form works.

Console search for Cisco suffix 0028.1001 hitting three live leases: sea-scan-020, sea-pc-020, sea-guest-020.

Who held this IP

Occupancy is every remaining lease row. As-of a day. CSV. Not grep dhcpd.leases.

Every hold. As-of a day on this computer. The grant is the occupancy log.

Every hold. As-of a day on this computer. The grant is the occupancy log.

History of 10.10.10.55: four holds, currently maya-chen-mbp (Apple); NAKs from a conference phone.

Keep BIND

TSIG after Ack into the zones you already run. Option 6 stays on BIND or Unbound. lattice-dns is optional, not required.

Same pool, any node

Community is one Ubuntu node. Same binaries. A Starter file adds dhcpd processes on the same database (Discover on one node, Ack on another, same pool) and three-node HA behind a VIP. Community is no license file. A 30-day Starter trial in the portal tests HA.

FAQ

Will Lattice ingest my dhcpd.conf?
No. Read subnet, range, and host blocks, map them, POST /api/v1. dhcpd.leases is not an import file. Read the migrate playbook.
Do I have to move DNS off BIND?
No. Keep BIND. TSIG after Ack into the zones you already run. Option 6 stays on BIND or Unbound.
Is Lattice an ISC failover peer?
No. There is no failover protocol. Paid HA is three Ubuntu VMs, one Postgres, one VIP. Discover on one node and Ack on another is the same pool. Read the HA docs.