Re: Delegation questions

2016-08-15 Thread Sam Wilson
objective reasons to eschew forwarding, particularly multi-hop > > forwarding. > > > >- Kevin > > > > > > -Original Message- > > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of

Re: Delegation questions

2016-08-12 Thread Chris Buxton
ay be some > objective reasons to eschew forwarding, particularly multi-hop forwarding. > >- Kevin > > > -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of > Willmann, Robert > Sent: Fri

RE: Delegation questions

2016-08-12 Thread Darcy Kevin (FCA)
rding, particularly multi-hop forwarding. - Kevin -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Willmann, Robert Sent: Friday, August 12, 2016 1:33 AM To: bind-users@lists.isc.org Subject: RE:

Re: Delegation questions

2016-08-12 Thread Reindl Harald
Am 12.08.2016 um 11:07 schrieb Willmann, Robert: Hi Harald, Do you see other downsides to forwarding? you get the lowest TTL in the whole chain and god beware none of the multi-hop forwarders have a cache hit so it makes it to the last in chain doing then recursion - it's a simple "worst

Re: Delegation questions

2016-08-12 Thread Reindl Harald
Am 12.08.2016 um 07:32 schrieb Willmann, Robert: Kevin Darcy wrote: In any case, multi-hop forwarding is always the least-preferred option. I wonder for which reason do you think this. Of course, any forwarding adds a additional hop and therefore additional delay and an additional

RE: Delegation questions

2016-08-12 Thread Willmann, Robert
Hi Harald, > > Do you see other downsides to forwarding? > > you get the lowest TTL in the whole chain and god beware none of the > multi-hop forwarders have a cache hit so it makes it to the last in chain > doing then recursion - it's a simple "worst case math" Do you ever have seen a

RE: Delegation questions

2016-08-11 Thread Willmann, Robert
Kevin Darcy wrote: > > In any case, multi-hop forwarding is always the least-preferred option. > I wonder for which reason do you think this. Of course, any forwarding adds a additional hop and therefore additional delay and an additional possible point of failure. But this is true for any

Re: Delegation questions

2016-08-11 Thread Barry S. Finkel
On 8/11/2016 12:22 PM, bind-users-requ...@lists.isc.org wrote: I have a child domain that is delegated to a second site. Pretty straightforward situation. In the parent zone I have NS records that point to the DNS servers at the second site. The issue comes up when a slaved copy of the parent

RE: Delegation questions

2016-08-11 Thread Darcy Kevin (FCA)
, August 11, 2016 1:44 PM To: bind-us...@isc.org Subject: RE: Delegation questions No, you would never get rid of a valid delegation of a child zone; why *reduce* the resolvability of that zone? Whatever you do to get around this connectivity issue would be *in*addition*to* the delegation

RE: Delegation questions

2016-08-11 Thread Darcy Kevin (FCA)
connectivity. But now we’re talking about multi-hop recursive resolution, and that’s definitely sub-optimal. - Kevin From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Bob McDonald Sent: Thursday, August 11, 2016 1:14 PM Cc: bind-us...@isc.org Subject: Re: Delegation questions Let me

Re: Delegation questions

2016-08-11 Thread Bob McDonald
> Your problem here is not directly related to the delegation. Your problem is that you have a recursive server (C) which is blocked from reaching a part of the Internet > where there is an authoritative server (B) it needs to contact. I thought I had said that... > That's a very convoluted way

Re: Delegation questions

2016-08-11 Thread Matthew Pounsett
On 11 August 2016 at 10:14, Bob McDonald wrote: > > Currently, clients sending queries for domain child.example.com. to > server A get good results. > However, clients sending queries for domain child.example.com. to server > C get SERVFAIL because server C has no access

RE: Delegation questions

2016-08-11 Thread Darcy Kevin (FCA)
, 2016 12:52 PM To: Bob McDonald Cc: bind-us...@isc.org Subject: Re: Delegation questions On 11 August 2016 at 09:13, Bob McDonald <bmcdonal...@gmail.com<mailto:bmcdonal...@gmail.com>> wrote: I have a child domain that is delegated to a second site. Pretty straightforward situation. I

Re: Delegation questions

2016-08-11 Thread Bob McDonald
Let me be a bit more clear... This is strictly internal. There are no external clients or servers involved. All three of the servers have recursion turned ON. Server A has a domain (example.com.) example.com. has an NS record that points to server B and delegate child.example.com. (yes there's

Re: Delegation questions

2016-08-11 Thread Matthew Pounsett
On 11 August 2016 at 09:13, Bob McDonald wrote: > I have a child domain that is delegated to a second site. Pretty > straightforward situation. In the parent zone I have NS records that point > to the DNS servers at the second site. > > The issue comes up when a slaved