Determining Which Authoritative Sever to Use

[Ben Croswell]

I will say edge DNS servers reduce client config complexity, even if you
have DHCP, and increase resiliency of the initial resolver.

Where it's true with DHCP you can change the DHCP server options it doesn't
help if someone just got a 4 day lease and then the DNS server dies.

Additionally the abstraction layer makes patching and decom of DNS servers
much easier. No config to chane just kill the box. Perhaps this is less of
a concern I'd you are running a smaller environment but when you are
running 400 to 500 servers in a variety of roles globally it becomes a
valuable resource.

On Tue, May 10, 2022, 5:49 PM Grant Taylor via bind-users <
bind-users at lists.isc.org> wrote:

> On 5/8/22 5:58 AM, Tony Finch wrote:
> > Regarding anycast, it isn't necessary for internal authoritative
> > servers unless your organization is really huge (and probably not
> > even then): it is simpler to just use the DNS's standard reliabilty
> > features. All you need to do is have more than one authoritative
> > server for each zone.
>
> I don't know if it's a requirement for the OP or not, but Windows used
> to reach out to the MName server to perform dynamic updates.  So there
> might be some merit to the name of the MName server to be a pseudo name
> that resolves to an anycasted address, thus clients try to perform the
> dynamic update to the closest instance of the anycast / (pseudo) MName
> server.
>
> Aside:  Years ago, BIND secondaries would happily forward such dynamic
> updates the real primary MName server.
>
> Further aside:  The last time I looked, MS-DNS ADI zones would forge the
> local server's name as the MName to cause this type of client redirection.
>
> > On the other hand, anycast is a good way to improve the availability
> > and maintainability of your resolvers, because your users' devices
> > talk directly to them, and if they don't work there might as well
> > not be an Internet connection.
>
> I agree that anycasted service points make administration somewhat
> simpler.  However I do question the /need/ for such flexibility when
> things like DHCP are likely used for client configuration and can
> therefor manage most things automatically.
>
>
>
> --
> Grant. . . .
> unix || die
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220510/fcd42b45/attachment.htm>