[dns-operations] anybody here from GDNS?

Sean Donelan sean at donelan.com
Wed Jul 16 02:11:36 UTC 2008


On Tue, 15 Jul 2008, Paul Vixie wrote:
> anyone doing both authority and recursive in the same nameserver images
> should be using views.  or multiple nameserver images, each having its own
> listener IP.  note that in the case of views, the nameserver really does
> ask itself questions and answer them.  in the case of multiple images, they
> really do discover eachother by iterating downward from the root zone.

In the past, my suggestion has been to use different servers if you
can.  But for those who don't, are there complete examples of
setting up a single server for both non-recursive authoritative, and
recursive non-authoritative views for the same clients?  I've pointed
people to the isc.org tech papers and team cymru secure configuration;
but they seem to assume you are using views because you have a 
split-network.

The simpliest case would be a server authoritative for EXAMPLE.COM,
and providing recursive service to the server (i.e. localhost).




More information about the dns-operations mailing list