On 14 September 2016 at 12:17, Job <[email protected]> wrote:
> Hello, > > which is the best load balancer for two or more Bind DNS Server, located > in the same farm? > I read something about HAProxy but it does not manage udp connection and > the interesting security proxy/balancer DnsDist does not pass original > client ip for Bind-DLZ... > > Your best option is something that can do the job statelessly. As Warren says, anything that keeps state (firewall, load balancer, etc.) becomes a DoS target... or, at best, becomes the thing that runs out of resources before your network or your DNS servers do. Mostly that means using a routing protocol to do LAN-scope Anycast via ECMP. ISC has a technote that explains how to do it. <http://ftp.isc.org/isc/pubs/tn/isc-tn-2004-1.html>
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
