Re: Multiple DNS

2006-02-22 Thread bsd

 Le 19 févr. 06 à 08:46, Robert Slade a écrit :

 Hi,

 I am looking for some advice. I have a network which is based on a
 number of servers running FreeBsd 6.0 serving Win XP work stations.
 (yes
 I know but..) The network is large enough to use DHCP and DNS for the
 internal network, I have setup a DHCP server with a Dynamic DNS
 (Bind 9)
 on one of the servers. That server is handling the LDAP side of the
 domain.


 Is your DNS server busy resolving internal requests or external ones ?

Mostly external from what I can ascertain, it looks like the mail server
(Qmail) doing lookups.

 There appears to be a fair bit of DNS Traffic which leads to a
 secondary
 DNS being required to take some of the load as DNS lookup are slow.
 The
 question I have is should I just setup a cashing DNS on another server
 using the primary as a forwarder or even several servers eg the mail
 server and the secondary LDAP server, or should I setup a proper
 secondary DNS using my ISP as a forwarder with dynamic updates from
 the
 primary.


 You should not forward anything to your ISP. This is probably the
 main reason for your DNS beeing slow.

 You should make shure you have well defined your network in your conf
 (so that you don't resolve queries for outside users...)-
 I would not advise you to forward any queries to your ISP as this
 will disable the capacity for your own server to build It's own
 resolver database and forward all the queries to the ISP (resulting
 in slow answers)!

I've now taken out the forwarders.



 Normaly you should configure the master and the slave to be
 authoritative for your internal domains.
 And configure the master and the slave to resolve ALL the Internet
 domains for your internal network and none for outside domains.

That is how I have setup the master, it only answer's queries from the
internal network.


 DNS is very tightly related to network... And we don't have any clue
 for the topology of your Net.


 SHORT ANSWER : DON'T FORWARD -- BUILD YOUR OWN DATABASE!!


 Sorry if this is a bit vague, but I have no experience in this area.

 Rob



Thanks for the info, it has helped me. I had misunderstood the forwarders
bit.

Many thanks

Rob

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Multiple DNS

2006-02-21 Thread Ted Mittelstaedt

DNS lookups aren't being slow because you need a secondary DNS
server.  Something else in your network or in your configuration
is wrong.  We serve DNS for
thousands of customers off of a pair of systems that are basically
equivalent to pentium pro 200's with 128MB of ram.

Keep in mind most Windows systems will not switch over to the
secondary DNS server defined in their configuration unless traffic
to the primary is kicked back with an icmp message host unreachable,
or some such.

Ted

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Robert Slade
Sent: Saturday, February 18, 2006 11:46 PM
To: freebsd-questions@freebsd.org
Subject: Multiple DNS


Hi,

I am looking for some advice. I have a network which is based on a
number of servers running FreeBsd 6.0 serving Win XP work stations. (yes
I know but..) The network is large enough to use DHCP and DNS for the
internal network, I have setup a DHCP server with a Dynamic DNS (Bind 9)
on one of the servers. That server is handling the LDAP side of the
domain.

There appears to be a fair bit of DNS Traffic which leads to a secondary
DNS being required to take some of the load as DNS lookup are slow. The
question I have is should I just setup a cashing DNS on another server
using the primary as a forwarder or even several servers eg the mail
server and the secondary LDAP server, or should I setup a proper
secondary DNS using my ISP as a forwarder with dynamic updates from the
primary.

Sorry if this is a bit vague, but I have no experience in this area.

Rob


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 267.15.12/265 - Release
Date: 2/20/2006


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple DNS

2006-02-20 Thread bsd


Le 19 févr. 06 à 08:46, Robert Slade a écrit :


Hi,

I am looking for some advice. I have a network which is based on a
number of servers running FreeBsd 6.0 serving Win XP work stations.  
(yes

I know but..) The network is large enough to use DHCP and DNS for the
internal network, I have setup a DHCP server with a Dynamic DNS  
(Bind 9)

on one of the servers. That server is handling the LDAP side of the
domain.



Is your DNS server busy resolving internal requests or external ones ?

There appears to be a fair bit of DNS Traffic which leads to a  
secondary
DNS being required to take some of the load as DNS lookup are slow.  
The

question I have is should I just setup a cashing DNS on another server
using the primary as a forwarder or even several servers eg the mail
server and the secondary LDAP server, or should I setup a proper
secondary DNS using my ISP as a forwarder with dynamic updates from  
the

primary.



You should not forward anything to your ISP. This is probably the  
main reason for your DNS beeing slow.


You should make shure you have well defined your network in your conf  
(so that you don't resolve queries for outside users...)-
I would not advise you to forward any queries to your ISP as this  
will disable the capacity for your own server to build It's own  
resolver database and forward all the queries to the ISP (resulting  
in slow answers)!



Normaly you should configure the master and the slave to be  
authoritative for your internal domains.
And configure the master and the slave to resolve ALL the Internet  
domains for your internal network and none for outside domains.



DNS is very tightly related to network... And we don't have any clue  
for the topology of your Net.



SHORT ANSWER : DON'T FORWARD -- BUILD YOUR OWN DATABASE!!



Sorry if this is a bit vague, but I have no experience in this area.

Rob


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]



«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple DNS

2006-02-19 Thread Andrew Pantyukhin
On 2/19/06, Robert Slade [EMAIL PROTECTED] wrote:
 Hi,

 I am looking for some advice. I have a network which is based on a
 number of servers running FreeBsd 6.0 serving Win XP work stations. (yes
 I know but..) The network is large enough to use DHCP and DNS for the
 internal network, I have setup a DHCP server with a Dynamic DNS (Bind 9)
 on one of the servers. That server is handling the LDAP side of the
 domain.

 There appears to be a fair bit of DNS Traffic which leads to a secondary
 DNS being required to take some of the load as DNS lookup are slow. The
 question I have is should I just setup a cashing DNS on another server
 using the primary as a forwarder or even several servers eg the mail
 server and the secondary LDAP server, or should I setup a proper
 secondary DNS using my ISP as a forwarder with dynamic updates from the
 primary.

 Sorry if this is a bit vague, but I have no experience in this area.

 Rob


 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


A secondary server using the primary as a forwarder is
generally a better idea if the primary is stable enough.
The secondary will share some load without taking up
extra bandwidth.

In case the primary is not stable enough, or if you really
need to scale by 2 (i.e. share the load evenly between
the servers), you'll have to use the ISP's dns servers as
forwarders instead. This will cut the efficiency of your
DNS cache by two.

At our place (3000+ hosts) we have our primary on a
rock-solid box and secondaries using it as forwarder.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Multiple DNS

2006-02-18 Thread Robert Slade
Hi,

I am looking for some advice. I have a network which is based on a
number of servers running FreeBsd 6.0 serving Win XP work stations. (yes
I know but..) The network is large enough to use DHCP and DNS for the
internal network, I have setup a DHCP server with a Dynamic DNS (Bind 9)
on one of the servers. That server is handling the LDAP side of the
domain. 

There appears to be a fair bit of DNS Traffic which leads to a secondary
DNS being required to take some of the load as DNS lookup are slow. The
question I have is should I just setup a cashing DNS on another server
using the primary as a forwarder or even several servers eg the mail
server and the secondary LDAP server, or should I setup a proper
secondary DNS using my ISP as a forwarder with dynamic updates from the
primary.

Sorry if this is a bit vague, but I have no experience in this area.

Rob


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]