How to setup a backup NameServer?

houguanghua houguanghua at hotmail.com
Tue Apr 29 06:06:57 UTC 2014


hi kevin,
 
Stealth slaves can't be used as backup  NS server. This backup server can't be accessed by all internet users.
It can only be accessed by users from one ISP.  It's used when all authority NSs are down, especially in case of DDoS attack. 
 
Guanghua Hou
 

> 
> Message: 4
> Date: Mon, 28 Apr 2014 12:08:29 -0400
> From: Kevin Darcy <kcd at chrysler.com>
> To: bind-users at lists.isc.org
> Subject: Re: How to setup a backup NameServer?
> Message-ID: <535E7CFD.2010409 at chrysler.com>
> Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"
> 
> I'm not sure this makes sense from an architectural standpoint. If all 
> of the authoritative NSes are down, where is this "backup nameserver" 
> getting its data from, and how current is that data?
> 
> If slightly *stale* data is acceptable, in the absence of all 
> authoritative NSes, then why not just set up your "regular" 
> nameserver(s) as stealth slaves of the zone(s)? Why dedicate a special 
> "backup nameserver" for this function? What value does that add?
> 
>                              - Kevin
> On 4/27/2014 11:30 PM, houguanghua wrote:
> > Dear all,
> >
> > Does bind support backup nameserver? This nameserver isn't 
> > regeristered and not accessed in normal situation. Only when all 
> > authority NSs is down, this backup nameserver will be accessed by 
> > Local DNS server.
> >  How to configure this backup NS and how to configure in the local DNS 
> > server?
> >
> > Thanks,
> > Guanghua Hou
> >
> >
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> 
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140429/87b32ed5/attachment.html>


More information about the bind-users mailing list