Re: cache dead records
In article , net...@royal.net wrote: > Hello, > > We are using bind9 for DNS Cache. > What the problem is, sometime the IP address for a domain is dead, but > Bind won't know, and still responds the dead IP to clients, after that > clients access the sites failed. > So is there a way to do health check for destination IPs before > responding the DNS answers? > > Thanks. If you call Directory Assistance, do you expect them to not give you a phone number if there's no one home? -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: cache dead records
Look at something like an F5 GTM ... it can do health checks on pools and respond with only available/geographically close/etc ips... http://www.f5.com/products/big-ip/product-modules/global-traffic-manager .html More than likely far too big for what you're looking for, but service availability checking isn't really what BIND is used for. If you wanted to do it on the cheap, you could write a script that would check for service on the IP for a domain, and if it doesn't answer, updates the zone to remove/change the record. Todd. -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of net...@royal.net Sent: Thursday, October 22, 2009 11:45 PM To: bind-users@lists.isc.org Subject: cache dead records Hello, We are using bind9 for DNS Cache. What the problem is, sometime the IP address for a domain is dead, but Bind won't know, and still responds the dead IP to clients, after that clients access the sites failed. So is there a way to do health check for destination IPs before responding the DNS answers? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users - This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: cache dead records
On 22.10.09 23:45, net...@royal.net wrote: > We are using bind9 for DNS Cache. > What the problem is, sometime the IP address for a domain is dead, but > Bind won't know, and still responds the dead IP to clients, after that > clients access the sites failed. > So is there a way to do health check for destination IPs before > responding the DNS answers? what should it respond in case of unavailability? NXDOMAIN? or refuse the service? You are trying to resolve problem on bad place. It's almost as bad as translating NXDOMAIN responses to A records pointing to a server where... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0... ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: cache dead records
On Oct 23, 2009, at 5:45, net...@royal.net wrote: We are using bind9 for DNS Cache. What the problem is, sometime the IP address for a domain is dead, but Bind won't know, and still responds the dead IP to clients, after that clients access the sites failed. So is there a way to do health check for destination IPs before responding the DNS answers? It is not the job of DNS to test system availability. If the systems in question move often, you need to plan ahead by providing the associated RRSets with more appropriate TTLs. AlanC ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users