DNS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationDNS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old January 26th, 2009, 05:18 PM
alaphoid alaphoid is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2009
Posts: 3 alaphoid User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 1 h 8 m 11 sec
Reputation Power: 0
BIND Cache - Authoritative

Here is the situation:
We have several DNS servers authoritativly hosting about 80,000 domains. Would like to test using a BIND based caching server in front of the core DNS servers to decrease the load on the SQL (backend of the core dns servers)

Problem being that BIND will give non-authoritative answers to queries. I have set it to forward to only our core DNS servers, then cache the record for the time of the ttl.

Is there a way in this case to force BIND to answer authoritatively to all queries? (short of hacking the source) I am testing with BIND 9.6

Thanks!

Reply With Quote
  #2  
Old November 6th, 2009, 11:13 AM
JulianoP JulianoP is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2009
Posts: 1 JulianoP User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 m 4 sec
Reputation Power: 0
Same problem. Any suggestion?

Quote:
Originally Posted by alaphoid
Here is the situation:
We have several DNS servers authoritativly hosting about 80,000 domains. Would like to test using a BIND based caching server in front of the core DNS servers to decrease the load on the SQL (backend of the core dns servers)

Problem being that BIND will give non-authoritative answers to queries. I have set it to forward to only our core DNS servers, then cache the record for the time of the ttl.

Is there a way in this case to force BIND to answer authoritatively to all queries? (short of hacking the source) I am testing with BIND 9.6

Thanks!

Reply With Quote
  #3  
Old November 6th, 2009, 11:29 AM
alaphoid alaphoid is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2009
Posts: 3 alaphoid User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 1 h 8 m 11 sec
Reputation Power: 0
I did not discover a way to accomplish exactly what I wanted to do. Due to the production and mission critical nature of our DNS services I did not want to fiddle with the source. For now I have tweaked the cache settings as much as possible on the core servers and setup extra monitoring around DNS performance.

Reply With Quote
  #4  
Old November 7th, 2009, 07:42 PM
jwdonahue's Avatar
jwdonahue jwdonahue is offline
Bellevue WA, USA
Click here for more information.
 
Join Date: May 2004
Location: Bellevue Washington, USA
Posts: 2,516 jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level) 
Time spent in forums: 2 Weeks 5 Days 7 h 5 m 6 sec
Reputation Power: 619
What you need are more DNS servers and a load balancing scheme. There's more than one way to accomplish this in practice. You can setup a cluster or you can have lots of slaves and put load balancers(s) between them and your internet connection(s). If your serious about this, checkout F5 Networks Big-IP product line. This is not an endorsement of that product. I am sure there are others out there, but working for a particularly large software giant in Redmond WA over the past five years, I fielded more support questions regarding Big-IP than any other load balancing product. Seems to indicate its prevalence.
__________________
My worst nightmare was a pointless infinite loop.
Work in progress; don't poke the curmudgeon!
http://www.odonahue.com/

Reply With Quote
  #5  
Old November 7th, 2009, 07:59 PM
jwdonahue's Avatar
jwdonahue jwdonahue is offline
Bellevue WA, USA
Click here for more information.
 
Join Date: May 2004
Location: Bellevue Washington, USA
Posts: 2,516 jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level)jwdonahue User rank is Brigadier General (60000 - 70000 Reputation Level) 
Time spent in forums: 2 Weeks 5 Days 7 h 5 m 6 sec
Reputation Power: 619
Oh, I forget the ubiquitous delegation scheme. You can have your top level DNS servers delegate to other servers. This reduces the search space your top level DNS severs have to deal with and pushes some of the work off to other servers. Your top level servers would only handle domain delegation and other servers provide the answers. You just have to work out a scheme for which delegates handle which domains. Traffic to your top level servers is reduced as DNS caches store the delegation responses for specific domains.

Sorry, I can't help you with the Bind cfg specifics at this time. I just don't use Bind often enough and when I do, it's mostly trivial configurations.

Reply With Quote
  #6  
Old November 10th, 2009, 09:36 AM
alaphoid alaphoid is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2009
Posts: 3 alaphoid User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 1 h 8 m 11 sec
Reputation Power: 0
Actually I do use a BigIP unit for clustering of everything including the DNS servers, what I was really trying to accomplish is relieve some of the SQL traffic the DNS servers generate due to the sheer amount of queries. Things are working alright for now, but will probably end up revisiting this at some point in the future.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationDNS > BIND Cache - Authoritative


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump




 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 




© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 1 Hosted by Hostway
For more Enterprise Application Development news, visit eWeek