Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread Chris Buxton
On Jan 16, 2016, at 9:33 PM, David Li wrote: > > Hi, > > I am new to BIND. I am researching for a DNS server that can meet a > list of requirements to be used in a distributed system. They are: > > 1. Security (DNSSEC) > 2. High Availability (HA) > 3. Service Discovery

RE: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread Darcy Kevin (FCA)
hings from scratch, and/or cobbling together open source tools to make all of that work. -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of David Li Sent: Sunday, January 17, 2016 12:34 AM To: bind-users@lists.isc.org Subject:

Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread David Li
Hi Tony/Chris, Thanks for the suggestion and pointers. At this stage, my network design is still very fluid. However, the basic architecture constrains call for at least three racks of servers. Each is served by a TOR switch. One of the servers in each rack is dedicated to DHCP/DNS services so

Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-18 Thread Tony Finch
David Li wrote: > > Another question I haven't quite figured out is the HA architecture. > Is it possible to set up a cluster of BIND servers (> 2) for each VLAN > subnet with one of them as master the rest as slaves? Are these recursive or authoritative servers? For

Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-16 Thread David Li
Hi, I am new to BIND. I am researching for a DNS server that can meet a list of requirements to be used in a distributed system. They are: 1. Security (DNSSEC) 2. High Availability (HA) 3. Service Discovery (DNS-SD) So I think BIND might be my best choice so far. Others I have looked at