Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-08 Thread Robby Pedrica via Pdns-users
Hi Brian Understood re. "user ecs" vs "pass" = semantic error on my side. And yes, a local per branch recursor would better but we have to take installation/operational management overhead into account for doing this at a lot of sites; as well, we're trying to move away from local

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-08 Thread Otto Moerbeek via Pdns-users
On Tue, Nov 08, 2022 at 09:44:22AM +, Brian Candler via Pdns-users wrote: > On 08/11/2022 09:20, Robby Pedrica via Pdns-users wrote: > > > The CDN services work correctly when a branch uses the ISP-assigned DNS > > for that specific branch/link. But as mentioned, it's difficult to > > manage

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-08 Thread Brian Candler via Pdns-users
On 08/11/2022 09:20, Robby Pedrica via Pdns-users wrote: The CDN services work correctly when a branch uses the ISP-assigned DNS for that specific branch/link. But as mentioned, it's difficult to manage these DNS entries when you have many branches across the world (180 sites with 2 different

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-08 Thread Robby Pedrica via Pdns-users
Thanks Otto, " It is not 100% clear what you are trying to achieve" We simply want to use ecs to direct endpoints to their nearest pop for CDN services, specifically Microsoft-related services like Teams, Sharepoint, etc. The CDN services work correctly when a branch uses the ISP-assigned DNS

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-07 Thread Otto Moerbeek via Pdns-users
On Tue, Nov 08, 2022 at 08:35:33AM +0200, Robby Pedrica via Pdns-users wrote: > Hi all, > > I've searched pdns docs as well as threads here but can find nothing about > how to deploy ecs or more specifically, under which circumstance ecs can be > used. > > From what I understand of ecs, the

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-07 Thread Robby Pedrica via Pdns-users
Apologies, to clarify: 1. No we do not own the auth servers, the queries are for general internet DNS lookups so could hit any auth server. The recursor does it's standard root server and down lookups ... 2. The desired outcome is that clients are directed to local resources especially for

Re: [Pdns-users] pdns-recursor ecs support config designs

2022-11-07 Thread Ask Bjørn Hansen via Pdns-users
From your description it’s not clear (to me anyway) if you control the authoritative server that you care about or not and it’s not clear what the desired outcome you are looking for by using ECS. Ask ___ Pdns-users mailing list