Antwort: Multi-master scenario

[holger.honert at signal-iduna.de]

Hi Phil,
ever thought about DDNS-Updates from Win-Machines?

As far as I know and C. Liu is describing in his DNS Cookbook Win-Machines 
do not look after the NS statements in the zone. They use the MNAME-Field 
in the SOA Record. 

Are you running the multi-master servers with the same name?

Freundlichen Gruß
 
Holger Honert
 
KOMN-97851
 
SIGNAL IDUNA Gruppe
Joseph-Scherer-Str. 3
 
44139 Dortmund
 
Phone: +49 231/135-4043
FAX: +49 231/135-2959
 
mailto: holger.honert at signal-iduna.de






Phil Dibowitz <phil at ipom.com>
Gesendet von: bind-users-bounce at isc.org
02.02.2005 09:49
 
An:           bind-users at isc.org
Kopie: 
Thema:        Multi-master scenario


I'm planning to setup multi-mastering and am looking for comments:
To increase our redundancy, I'm planning on having another DNS server at
our DR (Disaster Recovery) site which will be configured as a master.
All of our slaves will then get both the IP of the current master and
this new master in its "masters { };" parameter for each one of our zones.

I then plan on having the automated system that does DNS updates
configured to update the zonefiles on both servers.

Now, as I've read the docs, this will all work - the slaves will take
info from the master with the most recent serial number that responds 
first.

My first question is... notifies. If all the slaves get notifies from
both masters -- will that cause any problem? Will they get confused? I'm
assuming they won't try two zone transfers, because they'll do one then
check the serial.

Anyway, currently the setup looks like:

        Hidden Master
                 |
                 |------ external-facing name servers (non-recursive)
                 |
                 |------ internal-facing name servers (recursive)

Now, our recursive name servers are slaves for our domains for a variety
of reasons (mostly political).

The only difference will be that there will be two hidden masters in the
future.

Thoughts? Comments? Concerns?

Thanks.

--
Phil Dibowitz                             phil at ipom.com
Freeware and Technical Pages              Insanity Palace of Metallica
http://www.phildev.net/                   http://www.ipom.com/

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
  - Benjamin Franklin, 1759



-- Attached file included as plaintext by Ecartis --
-- File: signature.asc
-- Desc: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCAJQBN5XoxaHnMrsRAiGqAKCW3chVu/7jLfDop0t+8qVdQ2Ot8ACbB9RV
eLFkrD1ovt00UfIfle5zKXo=
=HOB8
-----END PGP SIGNATURE-----