DNS with several ip adessess

Alan Clegg alan at clegg.com
Thu Jan 2 15:37:00 UTC 2014


On Jan 2, 2014, at 9:19 AM, WBrown at e1b.org wrote:

>>> Use views
>> 
>> Views +1 
> 
> When were views added to BIND?  We started using using multiple servers in 
> BIND 4, and I don't recall views being available back then, but I didn't 
> configure the servers, just maintained the zones.
> 
> We're still using multiple servers for internal vs. external resolution.

Views have been in bind “for all recent history”.

I’ve watched this thread and have been biting my tongue as long as I could.

I’m a proponent of separating servers and NOT using views, as any of you that have taken a class that I’ve taught will attest.

I’ve seen too many problems over the years that have been caused by incorrect maintenance of both data feeding the views and goofs in the mechanisms making sure that the correct view is made available to the correct slave servers (and clients).

With today’s hardware (virtualization, etc) it’s not very expensive to build out new servers.  Separate the services and you remove lots of the little prickly points that will cause you pain as the complexity of your infrastructure grows (and as you hand off to the ‘next generation’ of maintainers).

I’m actually more a proponent of creating an architecture that doesn’t NEED differentiated data, but there aren’t a lot of places implementing DNS / naming structures on green-fields these days.

AlanC
-- 
Alan Clegg | +1-919-355-8851 | alan at clegg.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140102/a166a413/attachment.bin>


More information about the bind-users mailing list