Fwd: DNS failover

[psowerby at bluecatnetworks.com]

What you may want to think about is a dedicated DNS appliance that you 
could use for yourself and become the "master" of
your own domain, rather than pay someone else to do it for you. Whether you 
use a solution like what we have, or build one for yourself,
the answer is still the same, you need to control your own nameservers and 
contain the cost within your own company.

This is the only way that you can be guaranteed to know what is going on 
with your nameservers, I have had similar experiences
in the past with the ISPs and ASPs that I have dealt with and didn't like 
their answers either.

Thanks
Peter Sowerby

>To: comp-protocols-dns-bind at uunet.uu.net
>Path: not-for-mail
>From: "Net Ganesh" <om_ganeshNOSPAM at libero.it>
>Newsgroups: comp.protocols.dns.bind
>Subject: DNS failover
>Date: Wed, 18 Jul 2001 14:48:55 +0200
>Organization: Centro Servizi Interbusiness
>Lines: 65
>NNTP-Posting-Host: 217.58.64.190
>X-Newsreader: Microsoft Outlook Express 5.50.4133.2400
>Sender: bind-users-bounce at isc.org
>List-unsubscribe: <mailto:bind-users-request at isc.org?Subject=unsubscribe>
>
>Hi all,
>we had experienced a DNS trouble last week.
>Please sorry for my english and you have to know my DNS' experience is quite
>simple.
>My domain is yoox.com .
>On Saturday,7 afternoon some partner was calling us sayin "your site is
>down" "emails to your domain are bouncin' back" ...I thought it was a
>problem of their ISP.
>On Monday, the problem was on people using British Telecom, Compuserve,
>Infinito.it, etc.
>We asked to our ASP, which administers the name servers , ns.etdotcom.it,
>ns3.etdotcom.it and they said "we didn't change your dns zone, this is a
>problem of other name server" .
>After this they forced a change to our SOA records and two days after we
>were visible and ok all around the Internet.
>My problem is that the ASP gave us no explanation, they was really passive
>about the problem, they called out but the strange is that only OUR domain
>had this problem.
>How can I push the ASP to be more reactive, since we are paying thousand'$
>every year for e-governance ? Also, they say : "DNS is NOT in the Service
>Level Agreement"....BUT THE NAME SERVER ARE IN THEIR SERVER FARM! I don't
>have any access to my dns records.
>They also said " dns2.nic.it had problems, this is authoritative for
>ns.etdotcom.it , so request for you from ISP using that name server failed
>".
>
>My question is : in case of similar trouble, can be helpful a product like
>DNS Expert to understand at what level of the dns' hierarchy the problem
>lies ?
>Or, if I see that our name server are running well, but we had trouble with
>some ISP name servers, what kind of actions should I take to solve faster
>the problem ?
>Thanks for any reply
>
>
>
>This was the zone before changing SOA .
>-----------------------------------------------------------
>; <<>> DiG 8.2 <<>> @tao.ita.tip.net yoox.it any soa
>; (2 servers found)
>;; res options: init recurs defnam dnsrch
>;; got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
>;; QUERY SECTION:
>;; yoox.it, type = SOA, class = IN
>;; ANSWER SECTION:
>yoox.it. 9m32s IN SOA ns.etdotcom.it.
>postmaster.etdotcom.it. (2001022701 ; serial 1D ; refres h1H ; retry 1W ;
>expiry 1D ) ; minimum
>
>;; AUTHORITY SECTION:
>yoox.it. 9m32s IN NS ns3.etdotcom.it.
>yoox.it. 9m32s IN NS ns.etdotcom.it.
>;; ADDITIONAL SECTION:
>ns.etdotcom.it. 8m56s IN A 194.177.117.103
>ns3.etdotcom.it. 8m56s IN A 213.92.12.103
>;; Total query time: 5005 msec
>;; FROM: ecs103 to SERVER: tao.ita.tip.net 194.20.0.22
>;; WHEN: Tue Jul 10 18:22:14 2001
>;; MSG SIZE sent: 25 rcvd: 148
>--------------------------------------------------

Peter Sowerby
Manager Support Services
Bluecat Networks
675 Cochrane Drive
6th Floor North Tower
Markham, Ontario
Canada
L3R 0B8
Tel:    905-946-3732
Fax:    905-474-2655

e-mail: psowerby at bluecatnetworks.com