Re: cache dead records

2009-10-23 Thread Barry Margolin
In article ,
 net...@royal.net wrote:

> Hello,
> 
> We are using bind9 for DNS Cache.
> What the problem is, sometime the IP address for a domain is dead, but 
> Bind won't know, and still responds the dead IP to clients, after that 
> clients access the sites failed.
> So is there a way to do health check for destination IPs before 
> responding the DNS answers?
> 
> Thanks.

If you call Directory Assistance, do you expect them to not give you a 
phone number if there's no one home?

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: cache dead records

2009-10-23 Thread Todd Snyder
Look at something like an F5 GTM ... it can do health checks on pools
and respond with only available/geographically close/etc ips... 

http://www.f5.com/products/big-ip/product-modules/global-traffic-manager
.html

More than likely far too big for what you're looking for, but service
availability checking isn't really what BIND is used for.

If you wanted to do it on the cheap, you could write a script that would
check for service on the IP for a domain, and if it doesn't answer,
updates the zone to remove/change the record. 

Todd.

-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of net...@royal.net
Sent: Thursday, October 22, 2009 11:45 PM
To: bind-users@lists.isc.org
Subject: cache dead records

Hello,

We are using bind9 for DNS Cache.
What the problem is, sometime the IP address for a domain is dead, but 
Bind won't know, and still responds the dead IP to clients, after that 
clients access the sites failed.
So is there a way to do health check for destination IPs before 
responding the DNS answers?

Thanks.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

-
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this transmission 
by unintended recipients is not authorized and may be unlawful.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: cache dead records

2009-10-22 Thread Matus UHLAR - fantomas
On 22.10.09 23:45, net...@royal.net wrote:
> We are using bind9 for DNS Cache.
> What the problem is, sometime the IP address for a domain is dead, but  
> Bind won't know, and still responds the dead IP to clients, after that  
> clients access the sites failed.
> So is there a way to do health check for destination IPs before  
> responding the DNS answers?

what should it respond in case of unavailability? NXDOMAIN?
or refuse the service? 

You are trying to resolve problem on bad place. It's almost as bad as
translating NXDOMAIN responses to A records pointing to a server where...

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: cache dead records

2009-10-22 Thread Alan Clegg

On Oct 23, 2009, at 5:45, net...@royal.net wrote:


We are using bind9 for DNS Cache.
What the problem is, sometime the IP address for a domain is dead,  
but Bind won't know, and still responds the dead IP to clients,  
after that clients access the sites failed.
So is there a way to do health check for destination IPs before  
responding the DNS answers?


It is not the job of DNS to test system availability.

If the systems in question move often, you need to plan ahead by  
providing the associated RRSets with more appropriate TTLs.


AlanC
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users