Moving from "type forward" to "type static-stub"

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed Oct 10 18:44:38 UTC 2012


On 20.09.12 19:49, Oscar Ricardo Silva wrote:
>The current servers are configured to forward any queries for our 
>domain straight to our authoritative servers:
>
>I've been reading about the new zone type:  static-stub  and believe 
>this may work better for us.
>
>If I'm correct, it will send non-recursive queries to the listed 
>servers and will honor delegations. I've tested this configuration in 
>our lab and it all appears to be working.
>
>With our configuration, are there any downsides to changing from 
>forward zones to static-stub?  Any gotchas I should know about?  At 
>this time we don't have dnssec validation turned on.  We tried it and 
>had too many problems with misconfigured domains not resolving 
>properly so backed out.

typo forward supports "forward first" which is good if you have e.g. local
versions of blacklists but want to use standard resolution when your local
servers are unreachable.
  
-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759



More information about the bind-users mailing list