Multi-master DNS with Bind

[john.d...@teradyne.com]

Hi,

Looking to find information as to whether I can set up bind for multi-master DNS. I want to be able to update DNS records via any or more than one nameserver in the domain and have the records updated and propagated regardless if the "master" is available. Is this supported or are there ways to make this work with bind?

-John
 

[Evan Hunt]

Not at this time. We've discussed the subject at some length and it
may appear in a future release, but it's not on the near-term roadmap.

BIND 9 does support update forwarding (i.e., slaves receiving updates
and passing them on to the master), but that doesn't sound like what
you're looking for.

--
Evan Hunt -- ea...@isc.org
Internet Systems Consortium, Inc.

[Michelle Konzack]

Hello Evan Hunt,

Am 2012-08-05 20:26:06, hacktest Du folgendes herunter:

> Not at this time. We've discussed the subject at some length and it
> may appear in a future release, but it's not on the near-term roadmap.

Something for bind10?

> BIND 9 does support update forwarding (i.e., slaves receiving updates
> and passing them on to the master), but that doesn't sound like what
> you're looking for.

I do not think, because if the master goes Off-Line you are screwed

I have some automated scripts, which check the MASTER if it is On-Line
or not, and if not, a SLAVE switch to MASTER.

Requires that all SLAVES have rsynced backupfiles from the MASTER.

Another method would be that you do NOT USE SLAVES at all but instead
install on all MASTERS a CGI script and put the DATA for the ZONES in
CSV files, do cross-updates and let a script create the Zones
automaticaly.

Currently I am working on this kind of setup because I have an ADMIN
workstation/server with a PostgreSQL database with all required infos in
my office and replicated 3 times in the Internet in differnt countries.

It does not mather, on which ADMIN workstation/server I am working. It
will always update all 12 name servers correctly.

Thanks, Greetings and nice Day/Evening
Michelle Konzack

--
##################### Debian GNU/Linux Consultant ######################
Development of Intranet and Embedded Systems with Debian GNU/Linux
Internet Service Provider, Cloud Computing
<http://www.itsystems.tamay-dogan.net/>

itsystems@tdnet Jabber linux4m...@jabber.ccc.de
Owner Michelle Konzack

Gewerbe Strasse 3 Tel office: +49-176-86004575
77694 Kehl Tel mobil: +49-177-9351947
Germany Tel mobil: +33-6-61925193 (France)

USt-ID: DE 278 049 239

Linux-User #280138 with the Linux Counter, http://counter.li.org/

[Chris Buxton]

On Aug 5, 2012, at 11:26 PM, Evan Hunt wrote:
>> Looking to find information as to whether I can set up bind for
>> multi-master DNS. I want to be able to update DNS records via any or more
>> than one nameserver in the domain and have the records updated and
>> propagated regardless if the "master" is available. Is this supported or
>> are there ways to make this work with bind?
>

> Not at this time. We've discussed the subject at some length and it
> may appear in a future release, but it's not on the near-term roadmap.

Couldn't this be done with DLZ?

[Chris Buxton]

On Aug 6, 2012, at 7:37 PM, john.d...@teradyne.com wrote:

Don't know. I haven't used it. Do you have experience with it?

No, I don't have experience with DLZ. However, I believe multi-master DNS should be possible with DLZ and active-active database replication.

Regards,

Chris Buxton

BlueCat Networks

[Evan Hunt]

> > Not at this time. We've discussed the subject at some length and it
> > may appear in a future release, but it's not on the near-term roadmap.
>
> Couldn't this be done with DLZ?

DLZ is a mechanism by which it could be done, but as far as I'm aware no
one has done it. You'd need a database that did active data replication on
the backend, and a DLZ driver for that database which supported dynamic
updates. (The DLZ API introduced in BIND 9.8 has support for those, but
most existing DLZ drivers are still using the older API.)

I wouldn't want to do it that way, though; DLZ's too slow.

[david t. klein]

Each BIND instance is a "master", DLZ-backed by a multi-master,
fast-replication datastore (such as a directory) will give you what you
want, and many have made this work. You will need to do some building (the
zone management piece) and some tuning (pessimal performance until you make
it yours, heavy toll from attempting IXFR from it). You'll need to
understand DNS, BIND, your datastore technology and some of the caveats of
multimaster replication, including preventing race-condition and granular
resource locking, as well as inter-box semaphores.


Good luck.

--
david t. klein

Cisco Certified Network Associate (CSCO11281885)
Linux Professional Institute Certification (LPI000165615)
Redhat Certified Engineer (805009745938860)

Quis custodiet ipsos custodes?

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list

bind-users mailing list
bind-...@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2012.0.2197 / Virus Database: 2437/5182 - Release Date: 08/06/12