Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread David Li
Hi Tony/Chris, Thanks for the suggestion and pointers. At this stage, my network design is still very fluid. However, the basic architecture constrains call for at least three racks of servers. Each is served by a TOR switch. One of the servers in each rack is dedicated to DHCP/DNS services so th

RE: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread Darcy Kevin (FCA)
y stats, integration with Active Directory's "sites and subnets" mechanism, etc. I shudder to think how much time and effort would be involved in creating those things from scratch, and/or cobbling together open source tools to make all of that work. -Original Message- Fr

Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-19 Thread Chris Buxton
On Jan 16, 2016, at 9:33 PM, David Li wrote: > > Hi, > > I am new to BIND. I am researching for a DNS server that can meet a > list of requirements to be used in a distributed system. They are: > > 1. Security (DNSSEC) > 2. High Availability (HA) > 3. Service Discovery (DNS-SD) Hello David,

Re: Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-18 Thread Tony Finch
David Li wrote: > > Another question I haven't quite figured out is the HA architecture. > Is it possible to set up a cluster of BIND servers (> 2) for each VLAN > subnet with one of them as master the rest as slaves? Are these recursive or authoritative servers? For recursive servers you only n

Newbie's BIND Questions on DNSSEC, HA and SD

2016-01-16 Thread David Li
Hi, I am new to BIND. I am researching for a DNS server that can meet a list of requirements to be used in a distributed system. They are: 1. Security (DNSSEC) 2. High Availability (HA) 3. Service Discovery (DNS-SD) So I think BIND might be my best choice so far. Others I have looked at include