have DNS show two IP's for one server

Mike Ciccone mciccone at etoys.com
Thu Oct 26 15:54:08 UTC 2006


Yes, I do. 
I was just looking at www.dnsreport.com (just found this website) and I 
think the problem is with my parent servers.  I'll have to do some more 
research on this.
Again... Thanks for the assistance.


Michael Ciccone
Network Engineer
eToys Direct, Inc.
Office:  303-226-8617
Cell:  720-299-1573



Mark Andrews <Mark_Andrews at isc.org> 
Sent by: Mark_Andrews at isc.org
10/26/2006 09:23 AM

To
Mike Ciccone <mciccone at etoys.com>
cc
Sten Carlsen <ccc2716 at vip.cybercity.dk>, comp-protocols-dns-bind at isc.org
Subject
Re: have DNS show two IP's for one server







> So, does it depend on what server you are using?

                 No.  It depends on the cache's query history.

>  For example if I use 
> Qwest's 205.171.2.65.  I do get two IP's... But if I use Qwest's 
> 205.171.3.65 I only get one see below:
> 
> Does this mean I have everything setup correctly?

                 Did you want this name to have load balanced addresses?
                 Note the delegation is inconsistant.

                                 (parent)
mytwinn.com.            172800  IN      NS      con1.kbkids.com.
mytwinn.com.            172800  IN      NS      cons2.kbkids.com.

                                                 vs 

                                 (child)
mytwinn.com.            900     IN      NS      cons1.kbkids.com.
mytwinn.com.            900     IN      NS      cons2.kbkids.com.


 
> Thanks for the help.... 
> 
> server 205.171.2.65
> Default Server:  resolver2.qwest.net
> Address:  205.171.2.65
> 
> > www.mytwinn.com
> Server:  resolver2.qwest.net
> Address:  205.171.2.65
> 
> Non-authoritative answer:
> Name:    www.mytwinn.com
> Addresses:  64.78.154.27, 64.78.154.28
> 
> > server 205.171.3.65
> Default Server:  resolver1.qwest.net
> Address:  205.171.3.65
> 
> > www.mytwinn.com
> Server:  resolver1.qwest.net
> Address:  205.171.3.65
> 
> Non-authoritative answer:
> Name:    www.mytwinn.com
> Address:  64.78.154.27
> 
> Michael Ciccone
> Network Engineer
> eToys Direct, Inc.
> Office:  303-226-8617
> Cell:  720-299-1573
> 
> 
> 
> Mark Andrews <Mark_Andrews at isc.org> 
> Sent by: Mark_Andrews at isc.org
> 10/25/2006 05:10 PM
> 
> To
> Sten Carlsen <ccc2716 at vip.cybercity.dk>
> cc
> Mike Ciccone <mciccone at etoys.com>, comp-protocols-dns-bind at isc.org
> Subject
> Re: have DNS show two IP's for one server
> 
> 
> 
> 
> 
> 
> 
> > I see two addresses:
> > 
> > $dig www.mytwinn.com any
> > 
> > ; <<>> DiG 9.3.2 <<>> www.mytwinn.com any
> > ;; global options:  printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12091
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
> > 
> > ;; QUESTION SECTION:
> > ;www.mytwinn.com.               IN      ANY
> > 
> > ;; ANSWER SECTION:
> > www.mytwinn.com.        900     IN      A       64.78.154.27
> > www.mytwinn.com.        900     IN      A       64.78.154.28
> > 
> > ;; AUTHORITY SECTION:
> > mytwinn.com.            900     IN      NS      cons1.kbkids.com.
> > mytwinn.com.            900     IN      NS      cons2.kbkids.com.
> > 
> > ;; Query time: 222 msec
> > ;; SERVER: 192.168.14.254#53(192.168.14.254)
> > ;; WHEN: Thu Oct 26 00:45:20 2006
> > ;; MSG SIZE  rcvd: 112
> 
>                  But if you ask for A records you get 1 record w/ a 60 
> second TTL.
>                  It looks like there is a load balancer there which 
> forwards non
>                  A queries through to the BIND backend.
> 
> > Mike Ciccone wrote:
> > > Content-Type: text/plain; charset="US-ASCII"
> > > I'm sorry the abc123.com... wasn't the actual server.  The actual 
> server 
> > > is www.mytwinn.com
> > > Internally I get the following:
> > >
> > > nslookup www.mytwinn.com
> > > Server:         127.0.0.1
> > > Address:        127.0.0.1#53
> > >
> > > Name:   www.mytwinn.com
> > > Address: 64.78.154.27
> > > Name:   www.mytwinn.com
> > > Address: 64.78.154.28
> > >
> > > If I run the nslookup from an outside source I only get one address 
> > > (either one but only one)
> > >
> > > For example:
> > >
> > >
> > >
> > >
> > >
> > >
> > > Stephane Bortzmeyer <bortzmeyer at nic.fr> 
> > > 10/25/2006 02:32 PM
> > >
> > > To
> > > cagspy <mciccone at etoys.com>
> > > cc
> > > comp-protocols-dns-bind at isc.org
> > > Subject
> > > Re: have DNS show two IP's for one server
> > >
> > >
> > >
> > >
> > >
> > >
> > > On Wed, Oct 25, 2006 at 12:43:19PM -0700,
> > >  cagspy <mciccone at etoys.com> wrote 
> > >  a message of 12 lines which said:
> > >
> > > 
> > >> When I run nslookup or dig from my dns server for my server
> > >> abc123.com.  I get both external IP's for that server.  When I go
> > >> out to the internet and do a lookup.  I only get one IP
> > >> 
> > >
> > > I indeed see one IP address:
> > >
> > > % dig A abc123.com.
> > >
> > > ; <<>> DiG 9.2.4 <<>> A abc123.com.
> > > ;; global options:  printcmd
> > > ;; Got answer:
> > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18465
> > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
> > >
> > > ;; QUESTION SECTION:
> > > ;abc123.com.                    IN      A
> > >
> > > ;; ANSWER SECTION:
> > > abc123.com.             86375   IN      A       71.18.51.167
> > >
> > > ;; AUTHORITY SECTION:
> > > abc123.com.             86375   IN      NS ns5.ixwebhosting.com.
> > > abc123.com.             86375   IN      NS ns6.ixwebhosting.com.
> > >
> > > ;; ADDITIONAL SECTION:
> > > ns5.ixwebhosting.com.   172667  IN      A       72.41.223.250
> > > ns6.ixwebhosting.com.   172667  IN      A       72.41.191.250
> > >
> > > ;; Query time: 1 msec
> > > ;; SERVER: 127.0.0.1#53(127.0.0.1)
> > > ;; WHEN: Wed Oct 25 22:32:00 2006
> > > ;; MSG SIZE  rcvd: 125
> > >
> > > 
> > >> (it does alternate). 
> > >> 
> > >
> > > Can you post the actual results you got, both internally and on the
> > > remote machine? Because your description does not seem to be 
complete.
> > >
> > >
> > >
> > >
> > >
> > >
> > > 
> > 
> > -- 
> > Best regards
> > 
> > Sten Carlsen
> > 
> > No improvements come from shouting:
> > 
> >        "MALE BOVINE MANURE!!!" 
> > 
> > 
> -- 
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org
> 
> 
> --=_alternative 004CFCD487257213_=
> Content-Type: text/html; charset="US-ASCII"
> 
> 
> <br><font size=2 face="sans-serif">So, does it depend on what server you
> are using?  For example if I use Qwest's 205.171.2.65.  I do
> get two IP's... But if I use Qwest's 205.171.3.65 I only get one see 
below:</
> font>
> <br>
> <br><font size=2 face="sans-serif">Does this mean I have everything 
setup
> correctly?</font>
> <br>
> <br><font size=2 face="sans-serif">Thanks for the help....  </font>
> <br>
> <br><font size=2 face="sans-serif">server 205.171.2.65</font>
> <br><font size=2 face="sans-serif">Default Server: 
 resolver2.qwest.net<
> /font>
> <br><font size=2 face="sans-serif">Address:  205.171.2.65</font>
> <br>
> <br><font size=2 face="sans-serif">> www.mytwinn.com</font>
> <br><font size=2 face="sans-serif">Server: 
 resolver2.qwest.net</font>
> <br><font size=2 face="sans-serif">Address:  205.171.2.65</font>
> <br>
> <br><font size=2 face="sans-serif"><b>Non-authoritative 
answer:</b></font>
> <br><font size=2 face="sans-serif"><b>Name:   
 www.mytwinn.com</b><
> /font>
> <br><font size=2 face="sans-serif"><b>Addresses:  64.78.154.27, 
64.78.15
> 4.28</b></font>
> <br>
> <br><font size=2 face="sans-serif">> server 205.171.3.65</font>
> <br><font size=2 face="sans-serif">Default Server: 
 resolver1.qwest.net<
> /font>
> <br><font size=2 face="sans-serif">Address:  205.171.3.65</font>
> <br>
> <br><font size=2 face="sans-serif">> www.mytwinn.com</font>
> <br><font size=2 face="sans-serif">Server: 
 resolver1.qwest.net</font>
> <br><font size=2 face="sans-serif">Address:  205.171.3.65</font>
> <br>
> <br><font size=2 face="sans-serif"><b>Non-authoritative 
answer:</b></font>
> <br><font size=2 face="sans-serif"><b>Name:   
 www.mytwinn.com</b><
> /font>
> <br><font size=2 face="sans-serif"><b>Address: 
 64.78.154.27</b></font>
> <br><font size=2 face="sans-serif"><br>
> Michael Ciccone<br>
> Network Engineer<br>
> eToys Direct, Inc.<br>
> Office:  303-226-8617<br>
> Cell:  720-299-1573</font>
> <br>
> <br>
> <br>
> <table width=100%>
> <tr valign=top>
> <td width=40%><font size=1 face="sans-serif"><b>Mark Andrews 
<Mark_Andrews
> @isc.org></b>
> </font>
> <br><font size=1 face="sans-serif">Sent by: Mark_Andrews at isc.org</font>
> <p><font size=1 face="sans-serif">10/25/2006 05:10 PM</font>
> <td width=59%>
> <table width=100%>
> <tr valign=top>
> <td>
> <div align=right><font size=1 face="sans-serif">To</font></div>
> <td><font size=1 face="sans-serif">Sten Carlsen 
<ccc2716 at vip.cybercity.dk&
> gt;</font>
> <tr valign=top>
> <td>
> <div align=right><font size=1 face="sans-serif">cc</font></div>
> <td><font size=1 face="sans-serif">Mike Ciccone 
<mciccone at etoys.com>,
> comp-protocols-dns-bind at isc.org</font>
> <tr valign=top>
> <td>
> <div align=right><font size=1 face="sans-serif">Subject</font></div>
> <td><font size=1 face="sans-serif">Re: have DNS show two IP's for one 
server<
> /font></table>
> <br>
> <table>
> <tr valign=top>
> <td>
> <td></table>
> <br></table>
> <br>
> <br>
> <br><tt><font size=2><br>
> > I see two addresses:<br>
> > <br>
> > $dig www.mytwinn.com any<br>
> > <br>
> > ; <<>> DiG 9.3.2 <<>> www.mytwinn.com 
any<br>
> > ;; global options:  printcmd<br>
> > ;; Got answer:<br>
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 
12091<br
> >
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL:
> 0<br>
> > <br>
> > ;; QUESTION SECTION:<br>
> > ;www.mytwinn.com.              
> IN      ANY<br>
> > <br>
> > ;; ANSWER SECTION:<br>
> > www.mytwinn.com.        900     IN 
 
>    A       64.78.154.27<br>
> > www.mytwinn.com.        900     IN 
 
>    A       64.78.154.28<br>
> > <br>
> > ;; AUTHORITY SECTION:<br>
> > mytwinn.com.            900   
 
> IN      NS      cons1.kbkids.com.<br>
> > mytwinn.com.            900   
 
> IN      NS      cons2.kbkids.com.<br>
> > <br>
> > ;; Query time: 222 msec<br>
> > ;; SERVER: 192.168.14.254#53(192.168.14.254)<br>
> > ;; WHEN: Thu Oct 26 00:45:20 2006<br>
> > ;; MSG SIZE  rcvd: 112<br>
> <br>
>                 
> But if you ask for A records you get 1 record w/ a 60 second TTL.<br>
>                 
> It looks like there is a load balancer there which forwards non<br>
>                 
> A queries through to the BIND backend.<br>
>                 
> <br>
> > Mike Ciccone wrote:<br>
> > > Content-Type: text/plain; charset="US-ASCII"<br>
> > > I'm sorry the abc123.com... wasn't the actual server. 
 The
> actual server <br>
> > > is www.mytwinn.com<br>
> > > Internally I get the following:<br>
> > ><br>
> > > nslookup www.mytwinn.com<br>
> > > Server:         127.0.0.1<br>
> > > Address:        127.0.0.1#53<br>
> > ><br>
> > > Name:   www.mytwinn.com<br>
> > > Address: 64.78.154.27<br>
> > > Name:   www.mytwinn.com<br>
> > > Address: 64.78.154.28<br>
> > ><br>
> > > If I run the nslookup from an outside source I only get one 
address
> <br>
> > > (either one but only one)<br>
> > ><br>
> > > For example:<br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > > Stephane Bortzmeyer <bortzmeyer at nic.fr> <br>
> > > 10/25/2006 02:32 PM<br>
> > ><br>
> > > To<br>
> > > cagspy <mciccone at etoys.com><br>
> > > cc<br>
> > > comp-protocols-dns-bind at isc.org<br>
> > > Subject<br>
> > > Re: have DNS show two IP's for one server<br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > > On Wed, Oct 25, 2006 at 12:43:19PM -0700,<br>
> > >  cagspy <mciccone at etoys.com> wrote <br>
> > >  a message of 12 lines which said:<br>
> > ><br>
> > >   <br>
> > >> When I run nslookup or dig from my dns server for my 
server<br>
> > >> abc123.com.  I get both external IP's for that 
server.
>  When I go<br>
> > >> out to the internet and do a lookup.  I only get one
> IP<br>
> > >>     <br>
> > ><br>
> > > I indeed see one IP address:<br>
> > ><br>
> > > % dig A abc123.com.<br>
> > ><br>
> > > ; <<>> DiG 9.2.4 <<>> A 
abc123.com.<br>
> > > ;; global options:  printcmd<br>
> > > ;; Got answer:<br>
> > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, 
id:
> 18465<br>
> > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, 
ADDITIONAL:
> 2<br>
> > ><br>
> > > ;; QUESTION SECTION:<br>
> > > ;abc123.com.              
>      IN      A<br>
> > ><br>
> > > ;; ANSWER SECTION:<br>
> > > abc123.com.             86375 
 
> IN      A       71.18.51.167<br>
> > ><br>
> > > ;; AUTHORITY SECTION:<br>
> > > abc123.com.             86375 
 
> IN      NS      ns5.ixwebhosting.com.<br>
> > > abc123.com.             86375 
 
> IN      NS      ns6.ixwebhosting.com.<br>
> > ><br>
> > > ;; ADDITIONAL SECTION:<br>
> > > ns5.ixwebhosting.com.   172667  IN     
 A
>       72.41.223.250<br>
> > > ns6.ixwebhosting.com.   172667  IN     
 A
>       72.41.191.250<br>
> > ><br>
> > > ;; Query time: 1 msec<br>
> > > ;; SERVER: 127.0.0.1#53(127.0.0.1)<br>
> > > ;; WHEN: Wed Oct 25 22:32:00 2006<br>
> > > ;; MSG SIZE  rcvd: 125<br>
> > ><br>
> > >   <br>
> > >> (it does alternate). <br>
> > >>     <br>
> > ><br>
> > > Can you post the actual results you got, both internally and
> on the<br>
> > > remote machine? Because your description does not seem to be
> complete.<br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > >   <br>
> > <br>
> > -- <br>
> > Best regards<br>
> > <br>
> > Sten Carlsen<br>
> > <br>
> > No improvements come from shouting:<br>
> > <br>
> >        "MALE BOVINE MANURE!!!" <br>
> > <br>
> > <br>
> -- <br>
> Mark Andrews, ISC<br>
> 1 Seymour St., Dundas Valley, NSW 2117, Australia<br>
> PHONE: +61 2 9871 4742              
>   INTERNET: Mark_Andrews at isc.org<br>
> </font></tt>
> <br>
> --=_alternative 004CFCD487257213_=--
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org





More information about the bind-users mailing list