Migrate domains to different DNS servers

Lightner, Jeff jlightner at water.com
Wed Apr 20 14:35:36 UTC 2011


By re-delegate do you mean at the Registrars and ISPs?

If so and if you have more than one DNS server for redundancy (as you should) then you can replace one server at a time using the same name/IP on the new server as on the old server.   When we did this a few years back we simply moved the network cables from old server to new server (after configuring the new server of course).   Of course you'd want to disable any notification/transfer from old BIND8 to new BIND9 prior to doing that.

-----Original Message-----
From: bind-users-bounces+jlightner=water.com at lists.isc.org [mailto:bind-users-bounces+jlightner=water.com at lists.isc.org] On Behalf Of Torinthiel
Sent: Wednesday, April 20, 2011 5:59 AM
To: "bind-users at lists.isc.org"
Subject: Re: Migrate domains to different DNS servers


Dnia 2011-04-20 17:25 listuser2 at gmail.com  napisał(a):

>Hello all,
>
>We have a couple of BIND 8 DNS servers that we want to decommission,
>obviously we need to migrate the domains to other DNS servers first, which
>ordinarily involves zone transfer and domain re-delegation. However, we do
>not have control over a lot of the domains (think hundreds) on the BIND 8
>servers, meaning we cannot re-delegate.

In what sense you don't have control?
I assume you don't have administrative access to the BIND8 boxes.
Do you have AXFR access to BIND8 boxes and/or do you have the zone files?
Do you have access to registrar, where you have registered your domains?
Also, important factor is whether the DNS for those domains are in-zone or 
out-zone
i.e. assume you have example.com. Are NS servers ns1.example.com (in-zone) 
or ns1.otherdomain.com (out-zone)

One important problem is data. If you don't have access to zones' contents 
(either via AXFR or having zone files) then how would you know what your new 
nameservers should respond?

Assuming you have data, here are your options for delegation

If you have access to registrar, you can freely change the servers domain is 
delegated to, so you can simply change that delegation. i.e. domain was 
delegated to ns1.domain.com, now is to ns3.domain.com or ns1.newdomain.com
In case of out-zone nameservers that's only a name change. In case of 
in-zone nameservers, it's either name and IP address change, or only IP 
address change.

If you don't have registrar access, you have out-zone nameservers and you 
control (can change RR in) the zone that nameservers are, you can change the 
A/AAAA records for NS, which will be a variation of your idea.
If you don't have registrar access and either you have in-zone nameservers, 
or can't control A/AAAA records of out-zone nameservers, than AFAIK you're 
out of luck.

>A desperate measure (if you want to call it) is to transfer the zones to 
the
>new DNS infrastructure then change the A record of the old DNS to use the 
IP
>address of the new DNS. Effectively the old DNS becomes an alias of the new
>DNS.

Possible problem: glue records. With internal NS and no access to registrar 
you have no way to update glue records, so domain will still be delegated to 
old servers.
Regards,
 Torinthiel
_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
 
Proud partner. Susan G. Komen for the Cure.
 
Please consider our environment before printing this e-mail or attachments.
----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------



More information about the bind-users mailing list