[cisco-voip] OT: DNS for data centers

[Matthew Loraditch]

So to answer your question, I think it's no, but from a practical standpoint of addressing your problem I would:

I would just create zones just for those specific records on your DC DNS server(s)

So a zone for oddballserver1.uoguelph.edu pointing to 1.1.1.1 and so on and then forward all other traffic to your regular servers.

We do this in the other direction when we the internal domain doesn't equal the public domain, but we have certain hosts like the exchange server or adfs server where we need the url to work internally but don't want to have to deal with all the normal www and other entries having to be maintained internally.






Matthew Loraditch
Sr. Network Engineer
p: 443.541.1518
w: www.heliontechnologies.com | e: MLoraditch at heliontechnologies.com
From: cisco-voip <cisco-voip-bounces at puck.nether.net> On Behalf Of Lelio Fulgenzi
Sent: Friday, November 8, 2019 4:22 PM
To: voyp list, cisco-voip (cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
Subject: [cisco-voip] OT: DNS for data centers


Here a question for those with DNS experience....

We have a requirement for our DC hosts to access some services/hosts using different IP addresses as the rest of campus. Sounds familiar right? We're investigating the best way to do this.

Are we looking at enabling split view DNS on our campus DNS servers? Or introducing a new set of data center DNS servers?

Here's the catch.... The DC servers need to access all the rest of the hosts at the same address of the rest of campus.

What we don't want to do is replicate our DNS zones in their entirety and then have to update each of them with each new DNS record request that comes in.

The question a few of us had is this.

Can a DNS server which is authoritative for a zone forward requests for that zone if they don't resolve internally?

The picture would be this.

Our campus DNS servers would remain. Two new DC DNS servers would be created with a handful (ok, more than a handful) of entries. The servers in the DC would point to the DC DNS server to get their information and the DC DNS server would forward the rest that it can not resolve to our campus DNS servers.

The campus DNS servers would _never_ refer requests to the DC servers.

Thoughts? (about this request)

---
Lelio Fulgenzi, B.A. | Senior Analyst
Computing and Communications Services | University of Guelph
Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON | N1G 2W1
519-824-4120 Ext. 56354 | lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>

www.uoguelph.ca/ccs<http://www.uoguelph.ca/ccs> | @UofGCCS on Instagram, Twitter and Facebook

[University of Guelph Cornerstone with Improve Life tagline]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1297 bytes
Desc: image001.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image022733.png
Type: image/png
Size: 9409 bytes
Desc: image022733.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image594216.png
Type: image/png
Size: 431 bytes
Desc: image594216.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image724040.png
Type: image/png
Size: 561 bytes
Desc: image724040.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image702176.png
Type: image/png
Size: 444 bytes
Desc: image702176.png
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20191108/1d74ed6b/attachment-0004.png>