How can I make DNS with Proxy Function ?

Kevin Darcy kcd at daimlerchrysler.com
Wed Mar 15 00:37:11 UTC 2000


scyoon at dacom.net wrote:

> From: À±¼ºÃ¶ 4267 at DACOM on 2000-03-14 05:58 PM
>
> To:   bind-users at isc.org
> cc:
> Subject:  How can I make DNS with Proxy Function ?
>
> Hi, All!
>
> I have the problem on testing DNS caching servers(BIND 8.2.2)
> which process DNS query packet redirected from L4 switch.
>
>   DNS caching servers work like below.
>     1. Local DNS server sends the DNS query packet outside network.
>     2. L4 Switch catch this packet(all DNS query packet).
>     3. L4 switch converts the source and destionation address of IP header
>        to the address of L4 switch and DNS caching server and saves original
> addresses.
>     4. L4 switch sends this packet to DNS caching server.
>     5. DNS caching server resolves this query and send the packet to L4 switch.
>     6. L4 switch converts the source and destination address of IP header
>        to original address and send the paceket to local DNS server.
>
> But I can't use this proxy function of L4 switch any more,
> because of performance of L4 switch.
> - session of port is available up to 64,000/sec without the proxy function,
> and is available up to 32,000/sec with the proxy function.
>
> To resolve this problem, I try to make DNS caching server process this proxy
> function.
> (like Web Cache Server, Ex: SQUID)
> So, I'd like to know what I have to do for it is whether to change BIND source
> code or
> to make new daemon program.
> If the first is right, I still wonder which part I have to change.
> And If not, I'd like to know the side effect of NAMED.

Maybe I'm missing something, but it seems to me like configuring forwarding from
the local DNS server to the "DNS caching server" (as you call it; but isn't the
local DNS server caching also?) should give you everything you want. Or, is there
some deeper reason to delude the local DNS server into thinking that it's getting
its answers directly from external sources?


- Kevin





More information about the bind-users mailing list