bind selective delegation, is it possible?
kal.feher at melbourneit.com.au
Wed Mar 28 06:49:52 UTC 2007
Ack I miss pasted the zone config. The line:
> bright.home. IN A 192.168.1.6
Is from another zone naturally ;)
bright.star. IN A 192.168.10.6
Is the correct RR.
On 28/3/07 11:47 AM, "Kal Feher" <kal.feher at melbourneit.com.au> wrote:
> I feel a little dirty saying this but you could CNAME a wildcard record. A
> quick test shows that it appears to work. Please note that I in no way
> endorse this solution. A better approach is to improve your load balancing
> technology so that it doesn't constrain you so.
> The following test worked fine:
> $TTL 1W
> @ IN SOA bright.star. root.localhost. (
> 86400 )
> IN NS bright
> * IN CNAME bright.star.
> <snip.... Further RRs below this proved to still work>
> "dark ~ # curl star " returns the web page at bright.star
> In your case you cname it to another domain that you can happily delegate to
> the load balancers.
> On 28/3/07 10:09 AM, "Mark Andrews" <Mark_Andrews at isc.org> wrote:
>>> I am trying to solve a DNS problem. I am trying to delegate my
>>> domain.com to another nameserver for the A record but I still want
>>> the MX record to be served by the original server. The reason for
>>> this is that I have load balancers and they expect to be delegated the
>>> NS authority for the domain of the website (so I have delegated
>>> www.domain.com with no problem) Now the problem I am having is that I
>>> also want to be able to load balance http://domain.com/ since it is
>>> quite common not to use the wwws nowadays. The nameserver
>>> functionality on these loadbalancers is primitive and they only
>>> support A records. If I put in an NS record on the master dns server
>>> and delegate domain.com to my load balancers, my email breaks because
>>> the DNS engines on the load balancers dont serve up MX records, only A
>>> records, but the delegation is relinquishing authority from the master
>>> server. If I use a CNAME, its the same thing, it delegates the entire
>>> domain and the master server becomes no longer authoritative for the
>>> MX record. Is there a way I can delegate domain.com to my load
>>> balancer for A records only but retain authority for the MX records?
>>> Or is there some other better way to accomplish this?
>>> Thank you very much.
>> That is not possible in the DNS. In the DNS you delegate
>> the entire namespace.
>> Some load balancers can let querys fall through to another
>> name server. Note you have to take care to set such systems
>> up correctly.
More information about the bind-users