Multi-master DNS with Bind

david t. klein root at
Tue Aug 7 10:16:33 UTC 2012

Each BIND instance is a "master", DLZ-backed by a multi-master,
fast-replication datastore (such as a directory) will give you what you
want, and many have made this work. You will need to do some building (the
zone management piece) and some tuning (pessimal performance until you make
it yours, heavy toll from attempting IXFR from it). You'll need to
understand DNS, BIND, your datastore technology and some of the caveats of
multimaster replication, including preventing race-condition and granular
resource locking, as well as inter-box semaphores.

Good luck.

david t. klein

Cisco Certified Network Associate (CSCO11281885)
Linux Professional Institute Certification (LPI000165615)
Redhat Certified Engineer (805009745938860)

Quis custodiet ipsos custodes?

-----Original Message-----
From: at
[ at] On Behalf Of
Evan Hunt
Sent: Monday, August 06, 2012 5:40 PM
To: Chris Buxton
Cc: bind-users at
Subject: Re: Multi-master DNS with Bind

> > Not at this time.  We've discussed the subject at some length and it 
> > may appear in a future release, but it's not on the near-term roadmap.
> Couldn't this be done with DLZ?

DLZ is a mechanism by which it could be done, but as far as I'm aware no one
has done it.  You'd need a database that did active data replication on the
backend, and a DLZ driver for that database which supported dynamic updates.
(The DLZ API introduced in BIND 9.8 has support for those, but most existing
DLZ drivers are still using the older API.)

I wouldn't want to do it that way, though; DLZ's too slow.

Evan Hunt -- each at
Internet Systems Consortium, Inc.
Please visit to
unsubscribe from this list

bind-users mailing list
bind-users at

No virus found in this message.
Checked by AVG -
Version: 2012.0.2197 / Virus Database: 2437/5182 - Release Date: 08/06/12

More information about the bind-users mailing list