<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 2013-06-05 14:27, Jonathan Reed
wrote:<br>
</div>
<blockquote
cite="mid:CAPw9y04t0kttLM_yr7ucG+c4hpQWFLiaE2hEZMJS+mUVc+3HPA@mail.gmail.com"
type="cite">
<div dir="ltr">
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">But
then I just hate forwards. Burned 1000x times, lesson learned
:)</blockquote>
<div><br>
</div>
<div>What are you referring to? Why are forwards such a bad
idea?<br>
</div>
</div>
<br>
</blockquote>
<br>
They're not automatically a bad idea, but I always prefer having a
local copy of a zone unless that's not practical.<br>
<br>
A couple real world example that I bang my head against
daily/weekly: <br>
<br>
1) I do some contract work out of a satellite office where we have a
full time site-to-site VPN to HQ, and as a result, I've forwarded
their domains to their internal NS over the VPN. Works great, except
that when the VPN is down, I can't reach their externally hosted
resources (which don't need the VPN, but do need DNS to work)<br>
<br>
2) Even when it works, their office is 200-400ms (or about 16 hours
door-to-door, including flight times) away from me. The internal DNS
uses very short TTLs. This means I've got a 200-400ms wait time to
access their public website (which is CDN hosted and otherwise very
responsive) to hit the homepage, then a few more 200-400ms waits for
other resources to start to load, and I do it every $small-TTL
seconds while I browse their site looking for something because the
cache expires quickly.<br>
<br>
I've never seen a case where slaves are less reliable than forwards,
but forwards are often less reliable than slaves. When a slave is
not realistic or practical, forwards get the job done.<br>
<br>
Keeping this thread in mind, the situation is a remote office where
the pipe is neither fat nor reliable. See #1 and #2 above.<br>
<br>
<span style="color: rgb(0, 0, 0); font-family: Arial; font-size:
x-small; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal; orphans:
auto; text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); display: inline !important; float: none;"></span>
<pre class="moz-signature" cols="72">--
Dave Warren
<a class="moz-txt-link-freetext" href="http://www.hireahit.com/">http://www.hireahit.com/</a>
<a class="moz-txt-link-freetext" href="http://ca.linkedin.com/in/davejwarren">http://ca.linkedin.com/in/davejwarren</a>
</pre>
</body>
</html>