Determining Which Authoritative Sever to Use

Ben Croswell ben.croswell at gmail.com
Sun May 8 12:02:51 UTC 2022


I would concur that internally Anycast is best for client facing edge nodes
to reduce client configuration complexity as well as reducing impact of a
first resolver outage.

On Sun, May 8, 2022, 7:59 AM Tony Finch <fanf at isc.org> wrote:

> Bob McDonald <bmcdonaldjr at gmail.com> wrote:
> >
> > My question is this; how do the recursive servers determine from
> > the information in the stub zone which name server to query?
>
> As well as what Bob Croswell said about SRTT (which is entirely correct),
> there's a subtlety with stub zones in particular.
>
> A stub zone works a bit like the root zone hints, in that the name servers
> that you configure are just used to find the zone's NS records. This means
> that stub zones don't override where queries are routed for these zones.
> If you want your resolver to ignore the NS records on your internal zones,
> you should use static-stub instead.
>
> Regarding anycast, it isn't necessary for internal authoritative servers
> unless your organization is really huge (and probably not even then): it
> is simpler to just use the DNS's standard reliabilty features. All you
> need to do is have more than one authoritative server for each zone.
> On the other hand, anycast is a good way to improve the availability and
> maintainability of your resolvers, because your users' devices talk
> directly to them, and if they don't work there might as well not be an
> Internet connection.
>
> --
> Tony Finch  <fanf at isc.org>  (he/they)  Cambridge, England
> Selsey Bill to Lyme Regis: East or southeast, veering south later, 2
> to 4. Smooth or slight, occasionally moderate for a time offshore.
> Fair. Good.
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220508/7126913b/attachment.htm>


More information about the bind-users mailing list