Determining Which Authoritative Sever to Use (Bob McDonald)

Petr Špaček pspacek at isc.org
Mon May 9 07:33:40 UTC 2022


I have to warn you:
Authoritative server selection in DNS is not standardized, and thus it 
is not guaranteed to be stable even between BIND releases.

If you need to make static and/or optimal routing then you need to reach 
into IP routing layer for that.

Petr Špaček



On 08. 05. 22 18:57, Ben Croswell wrote:
> On the closest server question it will prefer the closest but a certain 
> percentage will go to servers further away. Additionally depending on 
> the version of BIND and the distance it could lead to the servers 
> further away taking more traffic in high QPS situations.
> 
> If you are getting high QPS you could fire off a large amount of queries 
> to the "slower" server before it responds and resets its SRTT. I believe 
> newer BIND versions have moved away from a static decrement value and 
> has fixed the issue but even fixes some queries will go out of region.
> 
> 
> On Sun, May 8, 2022, 12:47 PM Bob McDonald <bmcdonaldjr at gmail.com 
> <mailto:bmcdonaldjr at gmail.com>> wrote:
> 
>     Thanks for the answers. A couple more questions and then I'll
>     stand down.
> 
>     First, it's Ben Croswell. Just pointing that out.
> 
>     Second, my reading of the definition of a static-stub zone in the
>     Bvarmindicates that its use is to allow a local copy of the NS list
>     which may differ from the primary zone. I'm not sure that's what I'm
>     looking for. I think I'm ok with the NS list from the primary zone.
>     Lei me take another swing and try to be a bit more pedantic to see
>     if that helps.
> 
>     I wish to define a global internal DNS environment.
> 
>     At the level closest to the client would be a global network of
>     recursive DNS servers which would handle all internal and external
>     DNS requests. The internal DNS zones would be housed on a
>     global network of authoritative only DNS servers. The NS list for
>     the internal DNS zones on these authoritative only servers would be
>     known to the recursive servers via stub zones. My question is, if a
>     client in Mumbai submits a DNS request to his local recursive server
>     for an internal authoritative only zone defined by a stub zone
>     statement, which authoritative only server does the recursive server
>     pick from the NS list and will that eventually be the "closest"
>     server. I'm assuming a global distribution of the authoritative
>     servers. E.g. Hong Kong, London, US East, US West, South Amer, etc.
>     The use of the stub zones in this case is to eliminate the need for
>     an internal root. I want to avoid lookups for example from clients
>     in Asia being sent to authoritative only servers in South Amer.
> 
>     Bob


More information about the bind-users mailing list