Re: Best practice MultiView

2023-04-21 Thread Greg Choules via bind-users
ent from the sender. Yixi Meta is registered with the Dutch Chamber of > Commerce trade register with number 85744115.* > -- > *Van:* Greg Choules > *Verzonden:* Wednesday, April 19, 2023 11:01:00 PM > *Aan:* Jiaming Zhang > *CC:* bind-users@lists.isc.org > *Onderwerp:* R

Re: Best practice MultiView

2023-04-21 Thread Jiaming Zhang
the sender. Yixi Meta is registered with the Dutch Chamber of Commerce trade register with number 85744115. Van: Greg Choules Verzonden: Wednesday, April 19, 2023 11:01:00 PM Aan: Jiaming Zhang CC: bind-users@lists.isc.org Onderwerp: Re: Best practice MultiView

Re: Best practice MultiView

2023-04-20 Thread Petr Špaček
On 19. 04. 23 23:01, Greg Choules via bind-users wrote: Hi Jiaming. Here's what I would do. I am assuming one nameserver for the public zone and one (different) nameserver for the internal zones. You would use more in practice but I'm keeping it simple, for illustration. The external NS is re

Re: Best practice MultiView

2023-04-19 Thread Greg Choules via bind-users
or the information inside it, without a written > consent from the sender. Yixi Meta is registered with the Dutch Chamber of > Commerce trade register with number 85744115.* > -- > *Van:* Greg Choules > *Verzonden:* Tuesday, April 18, 2023 2:51:05 PM >

Re: Best practice MultiView

2023-04-19 Thread Jiaming Zhang
: Jiaming Zhang CC: bind-users@lists.isc.org Onderwerp: Re: Best practice MultiView Hi Jiaming. Every zone *must* have one SOA record and at least one NS record. This is a requirement of the protocol. Internal clients will (probably) be making recursive queries to the internal DNS server for A

Re: Best practice MultiView

2023-04-18 Thread Greg Choules via bind-users
85744115.* > -- > *Van:* Greg Choules > *Verzonden:* Tuesday, April 18, 2023 2:10:49 PM > *Aan:* Jiaming Zhang > *CC:* bind-users@lists.isc.org > *Onderwerp:* Re: Best practice MultiView > > Hi Jiaming. > I had a similar requirement. Si

Re: Best practice MultiView

2023-04-18 Thread Jiaming Zhang
Verzonden: Tuesday, April 18, 2023 2:10:49 PM Aan: Jiaming Zhang CC: bind-users@lists.isc.org Onderwerp: Re: Best practice MultiView Hi Jiaming. I had a similar requirement. Since there were not many (a few tens or at most a hundred) names that needed to be resolved differently locally my approa

Re: Best practice MultiView

2023-04-18 Thread Jiaming Zhang
: Best practice MultiView On 18/04/2023 1:40 am, Jiaming Zhang wrote: However, I got a question on the syntax of also-notify​, what I can see from bind9's user manual, the target of also-notify​ can be | [ port ] | [ port ]​, does this means that I can use domain names of the server in

Re: Best practice MultiView

2023-04-18 Thread Greg Choules via bind-users
merce trade register with number 85744115.* > -- > *Van:* Greg Choules > *Verzonden:* Monday, April 17, 2023 4:43:58 PM > *Aan:* Jiaming Zhang > *CC:* bind-users@lists.isc.org > *Onderwerp:* Re: Best practice MultiView > > Hi Jiaming. > The a

Re: Best practice MultiView

2023-04-18 Thread Jiaming Zhang
Meta is registered with the Dutch Chamber of Commerce trade register with number 85744115. Van: Greg Choules Verzonden: Monday, April 17, 2023 4:43:58 PM Aan: Jiaming Zhang CC: bind-users@lists.isc.org Onderwerp: Re: Best practice MultiView Hi Jiaming. The

Re: Best practice MultiView

2023-04-17 Thread Nick Tait via bind-users
On 18/04/2023 2:43 am, Greg Choules via bind-users wrote: Why do you need it? Do you have some secondaries that are not listed as NS in zones? The goal was to have the primary use a particular TSIG key when it sends out the NOTIFY messages to the secondaries, which is achieved by turning off

Re: Best practice MultiView

2023-04-17 Thread Nick Tait via bind-users
On 18/04/2023 1:40 am, Jiaming Zhang wrote: However, I got a question on the syntax of |also-notify|​, what I can see from bind9's user manual, the target of |also-notify|​ can be | | [ port ] | [ port ]|​, does this means that I can use domain names of the server instead of IP? Both name

Re: Best practice MultiView

2023-04-17 Thread Greg Choules via bind-users
ipient, we kindly request you to delete the > message and inform the sender. It is strictly prohibited to disclose, copy > or distribute this email or the information inside it, without a written > consent from the sender. Yixi Meta is registered with the Dutch Chamber of > Commerce trad

Re: Best practice MultiView

2023-04-17 Thread Jiaming Zhang
de register with number 85744115. Van: bind-users namens Nick Tait via bind-users Verzonden: maandag, april 17, 2023 1:03 PM Aan: bind-users@lists.isc.org Onderwerp: Re: Best practice MultiView Hi Jiaming. You'll also need "match-clients" in the f

Re: Best practice MultiView

2023-04-17 Thread Nick Tait via bind-users
Hi Jiaming. You'll also need "match-clients" in the first view (at least), so that the correct view handles the zone transfer request. As well as specifying 'the right key' in match-clients, you'll probably also want to specify 'not the wrong key', otherwise you won't be able to query the vie

Re: Best practice MultiView

2023-04-17 Thread Mark Andrews
You use keys as well when sending notify to select which view processes the notify > On 17 Apr 2023, at 18:44, Jiaming Zhang wrote: > > Dear community, > > I was wondering if notifying and updating zones in different view (say > "internal" and "external") between bind servers via different ke

Best practice MultiView

2023-04-17 Thread Jiaming Zhang
Dear community, I was wondering if notifying and updating zones in different view (say "internal" and "external") between bind servers via different key is a good practice. I got a sample zone/config like below: ``` view "internal" { zone "example.com" IN { # some other config, master zone