rob05c commented on issue #3184: WIP Add CDN-in-a-Box Dynamic IPs
URL: https://github.com/apache/trafficcontrol/pull/3184#issuecomment-453195246
 
 
   > Serial number of all zone files will need to be incremented each time the 
DNS server is restarted. 
   
   That shouldn't be difficult with e.g. sed/awk, right? I haven't tried, but I 
can try to come up with something when I have time.
   
   > The size of the IPV4 and IPV6 subnets is not known to the DNS server
   
   Why is this an issue? If you mean for the Profiles, e.g. `ip_allow`, they 
don't need subnets, we can insert each IP into them. Is there another reason we 
need subnets?
   
   > Using a pull method for discovering IPs of services slows down the start 
of CIAB. A push model, imo, would be more suitable for adding stuff like DNSSEC 
DS records as they change within trafficops.
   
   I would really rather not Push. The "Enroller" does "push", and it's 
constantly having issues, and seems to be the cause of the CiaB taking so long 
frequently. I literally spent half the day yesterday, from 8am to noon, trying 
to get the CiaB to start, with cryptic Enroller failures.
   
   > There would also be no delay
   
   That's the theory, but in practice, it doesn't seem to be true. Things (both 
in CiaB and in the real world) are frequently waiting on pushes to happen, that 
fail and you never know why, or which side failed, or whether a push is being 
retried.
   
   Push has myriad downsides, not least of which is the unreliability, and 
difficulty to debug.
   
   I would much rather see us move away from those models, which to my 
experience, appears to be causing unreliability and slowdowns.
   
   The script is very lightweight, it should be fine running every 10s. Would 
that be too slow?

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to