Ok, so the changes are done and will be pushed out this evening. I suspect there will be a time frame after the changes are in place for the results to change.
I'll follow up with the list in a day. Thanks everyone. -jon -----Original Message----- From: Oliver Adam [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2008 10:30 AM To: Torrez,Jon; Bj?rn Mork Cc: foundry-nsp at puck.nether.net Subject: Re: [f-nsp] GSLB I do not know the complete configuration but the SI is able to reply with ACTIVE IPs only or with the BEST only. Using ACTIVE as in your original configuration is resulting in a list of ALL ACTIVE IPs - this list might get cached at a DNS server somewhere and these DNS server might use the list for a while in a round robin fashion to deliver an answer the client asking for the IP(s). BEST only results in an answer with a single IP address only. Only the one which is the best is going to be a part of the answer. Your current policy includes: dns active-only you would have to use dns best-only instead of active-only. The result might be still a list of IPs in case there is not any best selectable based on your selection criterias. You can still use the selction criterias you are using at the moment (health, load, RTT or whatever and RR or least conns as tie breaker). Try to keep the TTL as low as possible even if there are still some DNS server ignoring the TTL. R, OIiver At 16:11 08.07.2008, Torrez,Jon wrote: >So when I mailed the group I also opened a Foundry help desk ticket. > >Those guys are still out to lunch on this issue. > >Let's talk about this suggestion some more. > >Would that be alongside the other options or remove them and apply this >only? > >-jon > >-----Original Message----- >From: Bj?rn Mork [mailto:bjorn at mork.no] >Sent: Friday, July 04, 2008 6:26 AM >To: Torrez,Jon >Cc: dtemkin at yahoo.com; foundry-nsp at puck.nether.net >Subject: Re: [f-nsp] GSLB > >"Torrez,Jon" <Jon_Torrez at securecomputing.com> writes: > > > > DNS active-only: ENABLE DNS best-only: DISABLE DNS override: ENABLE > > >Don't know if I understand you problem, bu you do realize that dns >resolvers will cache your answers and probably apply a round-robin >selection of addresses? > >If want to force the clients to your best site, then you need to enable >"dns best-only" > > > >Bj?rn > >_______________________________________________ >foundry-nsp mailing list >foundry-nsp at puck.nether.net >http://puck.nether.net/mailman/listinfo/foundry-nsp
