Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread John Miller
Thanks, Phil. This makes perfect sense--unlike TCP, there's nothing inherent in UDP to make sure that packets come back from the right IP. Thank you also for explaining this in terms of the socket APIs. This is something I've only barely touched on--time for me to play around a bit and

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread Mark Andrews
In message cal5w20bysrz5o21eievdgybbg2hum7ydqzfio3cxxo5jzce...@mail.gmail.com , jagan padhi writes: Hi, Is it possible to configure BIND for IPV4 and IPV6 in the same server? Regards, Jagan Yes. listen-on-v6 { any; }; By default it use both IPv4 and IPv6 when recursing. -- Mark

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-24 Thread Phil Mayers
On 10/19/2012 07:25 PM, John Miller wrote: Here's a question, however: how does one get probes working for a transparent LB setup? If an rserver listens for connections on all interfaces, then probes work fine, but return traffic from the uses the machine's default IP (not the VIP that was

transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread John Miller
Hello everyone, Perhaps a Cisco list is a better destination for this, but I've seen a similar post here in the past couple of months, so posting here as well. I'm trying to get our Cisco ACE set up appropriately to handle DNS traffic. So far, I've gotten it working using NAT (each rserver

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread Chuck Swiger
Hi-- On Oct 19, 2012, at 11:25 AM, John Miller wrote: Hello everyone, Perhaps a Cisco list is a better destination for this, but I've seen a similar post here in the past couple of months, so posting here as well. I'm trying to get our Cisco ACE set up appropriately to handle DNS

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread John Miller
IMO, the only boxes which should have IPs in both public and private netblocks should be your firewall/NAT routing boxes. That's how we usually have our servers set up--the load balancer gets the public IPs, the servers get the private IPs, and we use NAT to translate between the two.

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread Daniel McDonald
On 10/19/12 1:25 PM, John Miller johnm...@brandeis.edu wrote: Hello everyone, Perhaps a Cisco list is a better destination for this, but I've seen a similar post here in the past couple of months, so posting here as well. I'm trying to get our Cisco ACE set up appropriately to handle

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread Chuck Swiger
Hi-- On Oct 19, 2012, at 1:04 PM, John Miller wrote: IMO, the only boxes which should have IPs in both public and private netblocks should be your firewall/NAT routing boxes. That's how we usually have our servers set up--the load balancer gets the public IPs, the servers get the private

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread Michael Hoskins (michoski)
-Original Message- From: Chuck Swiger cswi...@mac.com Date: Friday, October 19, 2012 5:09 PM To: John Miller johnm...@brandeis.edu Cc: DNS BIND bind-us...@isc.org Subject: Re: transparent DNS load-balancing with a Cisco ACE We're on a /16, so we have plenty of public IPs (though