Re: SRV on multiple subdomains

2024-05-16 Thread Greg Choules via bind-users
Adding my 2p, I would take that principle a step further.
Create a generic, unique SRV record that represents what you want to
happen. Then create specific CNAME records for each server. The reasons for
the extra, generic record are that it represents the service you want to
offer and all "server.." records you want to use that service are identical
in structure. e.g.

imap-tcp-service.example.com.  SRV  
_imap._tcp.server1.example.com.  CNAME  imap-tcp-service.example.com.
_imap._tcp.server2.example.com.  CNAME  imap-tcp-service.example.com.
...
_imap._tcp.server999.example.com.  CNAME  imap-tcp-service.example.com.
and so on.

Cheers, Greg

On Thu, 16 May 2024 at 11:43, Niall O'Reilly  wrote:

> On 14 May 2024, at 15:20, DEMBLANS Mathieu wrote:
>
> A part of the subdomains are managed by us, others subdomains by an other
> entity.
> So we can't configure a generic target for all subdomains as each entity
> has its own target for SRV entries.
>
> -Message d'origine-
>
> De : bind-users bind-users-boun...@lists.isc.org De la part de Matus
> UHLAR - fantoms
> Envoyé : mardi 14 mai 2024 15:58
> À : bind-users@lists.isc.org
> Objet : Re: SRV on multiple subdomains
> On 14.05.24 13:08, DEMBLANS Mathieu wrote:
>
> I have a question about configuration simplification for SRV configuration
> (maybe it can be applyed for other entries).
>
> We manage multiple subdomain of a main one (server1.example.com,
> server2.example.com,...).
> For A and MX entries, we use a general domain definitions with wildcard
> but is there a way to do so for SRV without having to define all subdomains
> (we have several dizains of it) ?
>
> We have to define some SRV entries with the same target like :
> _imap._tcp.server1.example.com IN SRV main.exemple.com
> _imap._tcp.server2.example.com IN SRV main.exemple.com
>
> Since a record is needed for each host, I think I would use something like
> this:
>
> imap._tcp.server1.example.com. IN SRV main.example.com.
> imap._tcp.server2.example.com. IN CNAME imap._tcp.server1.example.com.
> ...
> imap._tcp.servern.example.com. IN CNAME imap._tcp.server1.example.com.
>
> The advantage here is that, if ever the target of the SRV record had to
> be changed, only one record would have to be updated.
>
> /Niall
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SRV on multiple subdomains

2024-05-16 Thread Niall O'Reilly

On 14 May 2024, at 15:20, DEMBLANS Mathieu wrote:

A part of the subdomains are managed by us, others subdomains by an 
other entity.
So we can't configure a generic target for all subdomains as each 
entity has its own target for SRV entries.


-Message d'origine-

De : bind-users bind-users-boun...@lists.isc.org De la part de Matus 
UHLAR - fantoms

Envoyé : mardi 14 mai 2024 15:58
À : bind-users@lists.isc.org
Objet : Re: SRV on multiple subdomains
On 14.05.24 13:08, DEMBLANS Mathieu wrote:

I have a question about configuration simplification for SRV 
configuration (maybe it can be applyed for other entries).


We manage multiple subdomain of a main one (server1.example.com, 
server2.example.com,...).
For A and MX entries, we use a general domain definitions with 
wildcard but is there a way to do so for SRV without having to define 
all subdomains (we have several dizains of it) ?


We have to define some SRV entries with the same target like :
_imap._tcp.server1.example.com IN SRV main.exemple.com
_imap._tcp.server2.example.com IN SRV main.exemple.com


Since a record is needed for each host, I think I would use something 
like this:


imap._tcp.server1.example.com. IN SRV main.example.com.
imap._tcp.server2.example.com. IN CNAME 
imap._tcp.server1.example.com.

...
imap._tcp.servern.example.com. IN CNAME 
imap._tcp.server1.example.com.


The advantage here is that, if ever the target of the SRV record had to
be changed, only one record would have to be updated.

/Niall
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SRV on multiple subdomains

2024-05-15 Thread Matus UHLAR - fantomas

On 14.05.24 14:20, DEMBLANS Mathieu wrote:

A part of the subdomains are managed by us, others subdomains by an other 
entity.


If you really have multiple subdomains for exanmle.com managed by different 
entities, then yes, wildcard is not good idea.

This applies to A and MX records as well.

So we can't configure a generic target for all subdomains as each entity 
has its own target for SRV entries.


You can't even setup wildcard for *.example.com to provide 
server1.example.com A/MX record, because the _imap._tcp.server1.example.com 
would make the wildcard invalid for server1.example.com.


Simply, wildcarding is not for case like this.



-Message d'origine-
De : bind-users  De la part de Matus UHLAR - 
fantomas
Envoyé : mardi 14 mai 2024 15:58
À : bind-users@lists.isc.org
Objet : Re: SRV on multiple subdomains

On 14.05.24 13:08, DEMBLANS Mathieu wrote:

I have a question about configuration simplification for SRV configuration 
(maybe it can be applyed for other entries).

We manage multiple subdomain of a main one (server1.example.com, 
server2.example.com,...).
For A and MX entries, we use a general domain definitions with wildcard but is 
there a way to do so for SRV without having to define all subdomains (we have 
several dizains of it) ?

We have to define some SRV entries with the same target like :
_imap._tcp.server1.example.com  IN SRV main.exemple.com
_imap._tcp.server2.example.com  IN SRV main.exemple.com



I assume that _imap._tcp should be configurable per domain, so there should not 
be needed any need for things like _imap._tcp.server1.example.com
- you should use _imap._tcp.example.com


For example something like _imap._tcp.*.example.com  IN SRV main.example.com.
I read in a doc that the < * > can only be the  leftmost label in the name.


correct.


Is there an other way to simplify or does I have to add each entry individually?


no, but the question is if you really need this.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I'm not interested in your website anymore.
If you need cookies, bake them yourself.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: SRV on multiple subdomains

2024-05-14 Thread DEMBLANS Mathieu
A part of the subdomains are managed by us, others subdomains by an other 
entity.
So we can't configure a generic target for all subdomains as each entity has 
its own target for SRV entries.

-Message d'origine-
De : bind-users  De la part de Matus UHLAR - 
fantomas
Envoyé : mardi 14 mai 2024 15:58
À : bind-users@lists.isc.org
Objet : Re: SRV on multiple subdomains

On 14.05.24 13:08, DEMBLANS Mathieu wrote:
>I have a question about configuration simplification for SRV configuration 
>(maybe it can be applyed for other entries).
>
>We manage multiple subdomain of a main one (server1.example.com, 
>server2.example.com,...).
>For A and MX entries, we use a general domain definitions with wildcard but is 
>there a way to do so for SRV without having to define all subdomains (we have 
>several dizains of it) ?
>
>We have to define some SRV entries with the same target like :
>_imap._tcp.server1.example.com  IN SRV main.exemple.com 
>_imap._tcp.server2.example.com  IN SRV main.exemple.com


I assume that _imap._tcp should be configurable per domain, so there should not 
be needed any need for things like _imap._tcp.server1.example.com
- you should use _imap._tcp.example.com

>For example something like _imap._tcp.*.example.com  IN SRV main.example.com.
>I read in a doc that the < * > can only be the  leftmost label in the name.

correct.

>Is there an other way to simplify or does I have to add each entry 
>individually?

no, but the question is if you really need this.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted, then 
used against you.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SRV on multiple subdomains

2024-05-14 Thread Emmanuel Fusté

Le 14/05/2024 à 15:08, DEMBLANS Mathieu a écrit :


Hello,

I have a question about configuration simplification for SRV 
configuration (maybe it can be applyed for other entries).


We manage multiple subdomain of a main one (server1.example.com, 
server2.example.com,…).


For A and MX entries, we use a general domain definitions with 
wildcard but is there a way to do so for SRV without having to define 
all subdomains (we have several dizains of it) ?


We have to define some SRV entries with the same target like :

_/imap./_tcp.server1.example.com  IN SRV main.exemple.com

_/imap./_tcp.server2.example.com  IN SRV main.exemple.com

[…]

For example something like _/imap./_tcp.*.example.com  IN SRV 
main.example.com.


I read in a doc that the « * » can only be the  leftmost label in the 
name.


Is there an other way to simplify or does I have to add each entry 
individually?


I hope my question is clear enough, it’s not easy to explain.

Thanks

Mat




Avoid any use of wildcard.
In the present case you should not need it.
And if really needed, do provisioning. Wildcards are a true pandora's 
box. It is the "XSS" of the DNS.
Those who pretend to master all possible present and future practical 
side effects of a wildcard entry simply denote a lack of humility.


Emmanuel.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SRV on multiple subdomains

2024-05-14 Thread Matus UHLAR - fantomas

On 14.05.24 13:08, DEMBLANS Mathieu wrote:

I have a question about configuration simplification for SRV configuration 
(maybe it can be applyed for other entries).

We manage multiple subdomain of a main one (server1.example.com, 
server2.example.com,...).
For A and MX entries, we use a general domain definitions with wildcard but is 
there a way to do so for SRV without having to define all subdomains (we have 
several dizains of it) ?

We have to define some SRV entries with the same target like :
_imap._tcp.server1.example.com  IN SRV main.exemple.com
_imap._tcp.server2.example.com  IN SRV main.exemple.com



I assume that _imap._tcp should be configurable per domain, so there should 
not be needed any need for things like _imap._tcp.server1.example.com

- you should use _imap._tcp.example.com


For example something like _imap._tcp.*.example.com  IN SRV main.example.com.
I read in a doc that the < * > can only be the  leftmost label in the name.


correct.


Is there an other way to simplify or does I have to add each entry individually?


no, but the question is if you really need this.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted,
then used against you.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


SRV on multiple subdomains

2024-05-14 Thread DEMBLANS Mathieu
Hello,
I have a question about configuration simplification for SRV configuration 
(maybe it can be applyed for other entries).

We manage multiple subdomain of a main one (server1.example.com, 
server2.example.com,...).
For A and MX entries, we use a general domain definitions with wildcard but is 
there a way to do so for SRV without having to define all subdomains (we have 
several dizains of it) ?

We have to define some SRV entries with the same target like :
_imap._tcp.server1.example.com  IN SRV main.exemple.com
_imap._tcp.server2.example.com  IN SRV main.exemple.com
[...]

For example something like _imap._tcp.*.example.com  IN SRV main.example.com.
I read in a doc that the < * > can only be the  leftmost label in the name.
Is there an other way to simplify or does I have to add each entry individually?

I hope my question is clear enough, it's not easy to explain.
Thanks

Mat
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users