Best Practices for Authoritative Servers

Mark Andrews Mark_Andrews at isc.org
Fri Feb 1 01:33:19 UTC 2008


> Mark, that's really clever. Thanks!
> 
> As for loops in the AXFR chain, I used to not see the value until a  
> post from Kevin Darcy in this very forum. (I'll just refer readers to  
> the list archive, since I can't find the original post.) Basically,  
> what happens if the primary master goes down in the middle of  
> processing zone transfer requests from two slaves, such that one slave  
> has it and the other does not? Having the slaves use each other as  
> backup master ensures that the updated zone makes it to the other slave.

	Sure it helps get the latest zone out there.  It also breaks
	the failsafe that was built into the design of the DNS.
	You don't want the SOA/IXFR query to the slave to reset the
	expiry timer.

	For the example about resetting the expire timer on change
	would be reasonable but not on every SOA/IXFR query that
	is answered by the slave.

	Mark
	
> Chris Buxton
> Professional Services
> Men & Mice
> Address: Noatun 17, IS-105, Reykjavik, Iceland
> Phone:   +354 412 1500
> Email:   cbuxton at menandmice.com
> www.menandmice.com
> 
> Men & Mice
> We bring control and flexibility to network management
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list