Suggestions for a distributed DNS zone hosting solution I'm designing

Stephane Bortzmeyer bortzmeyer at nic.fr
Fri Mar 9 09:58:24 UTC 2018


On Thu, Mar 08, 2018 at 12:52:57PM +0000,
 Tony Finch <dot at dotat.at> wrote 
 a message of 49 lines which said:

> Best way to achieve this is with anycast, which can be pretty
> time-consuming to set up - try searching for Nat Morris's
> presentation "anycast on a shoestring" which he gave at several NOG
> meetings.  The advantage of anycast (as opposed to having NS records
> in lots of locations) is that you are depending less on resolvers to
> work out for themselves which of your servers is fastest.

It seems to me a DISadvantage of anycast. Resolvers use actual RTT to
find the fastest server while BGP uses metrics which are far from
optimal. The advantage of anycast is isolation of local dDoS, and the
ability to have much more servers. Because of the above DISadvantage,
I would advocate against a zone with only opne anycasted server (even
if it works in theory).

> IXFR+NOTIFY will achieve this, without much effort,

Remember that NOTIFY packets can be lost (it's ordinary UDP). Can BIND
do NOTIFY over TCP?

> > 1. How can I examine DNS resolution times using this platform (or other
> > platforms to compare with) in different geographic areas of the world
> > without first deploying it?
> 
> There are some distributed measurement platforms such as RIPE ATLAS.
> (I can't think of any others off the top of my head.)

Atlas is great but the OP said "without first deploying it". (And I
believe he asks for the impossible.)


More information about the bind-users mailing list