Feature request - disable internal recursion cache

Barry Margolin barmar at alum.mit.edu
Sat Oct 31 08:53:23 UTC 2009


In article <mailman.834.1256928257.14796.bind-users at lists.isc.org>,
 Kevin Darcy <kcd at chrysler.com> wrote:

> Chris Thompson wrote:
> > On Oct 30 2009, Michael Hare wrote:
> >
> >> For those of us that are still running auth and recursive on the same 
> >> IP, I believe the benefit would be to deploy a best practices 
> >> recursive only nameserver on a different machine/IP address without 
> >> getting, in my case, possibly hundreds of thousands of clients to 
> >> change their DNS resolver IP address.
> >
> > Put the authoritative-only nameservers at the new IP addresses, keeping
> > the recursive ones at the original IP addresses.
> >
> > Been there, done that!
> >
> Well, except then you need to update all of your delegations. That can 
> not only be an administrative hassle, but can also get very expensive, 
> especially if you have hundreds of them in ccTLDs, where you have to pay 
> your "in-country agent" a fee for every registry change. It's quite a 
> racket.

You don't have to change all the domain registrations.  You just have to 
change the A records of the nameserver names.  Hopefully you haven't 
done something silly like use different nameserver names for each domain.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list