20 Úno
2019
20 Úno
'19
13:32
Hello,
I have at the moment a network with 3 DNS servers. They do
recursive/caching as well as authorative zones (Bind 9). I want to build
a structure with 2 authorative Servers using Knot-DNS and 3 resolvers
using Knot-Resolver.
As our authorative servers are in our network and as I want to get any
changes in their zones as fast as possible to our users I use from the
documentation:
Replacing part of the DNS tree
Interesting is this line:
policy.add(policy.suffix(policy.STUB({'$our ip'}), extraTrees))
Can I put more than one IP at this line to forward the queries? We have
2 authorative servers, so I want ask both of them round robin like.
In my config I have comma separated two servers, kresd is running with
it, but it seems it uses only the first.
Is there a way to get my desired behavior?
Regards
Thomas
P.S.: Versions are Knot-Resolver 3.2.1 and OS is Ubuntu 18.04.02
--
Thomas Belián
Fachhochschule Erfurt
Fak. GTI / FR AI & Hochschulrechenzentrum
Postfach 45 01 55, 99051 Erfurt
Telefon: +49361 6700 - 647
E-Mail: thomas.belian(a)fh-erfurt.de
20 Úno
20 Úno
13:40
On 2/20/19 1:32 PM, Thomas Belián wrote:
policy.add(policy.suffix(policy.STUB({'$our
ip'}), extraTrees))
Can I put more than one IP at this line to forward the queries? We have
2 authorative servers, so I want ask both of them round robin like.
Up to four addresses are supported inside a STUB "command", but the
semantics isn't really round-robin - kresd prefers servers that answer
faster, and there's not much "randomization" so far (I have such
improvements in plans), so it may well end up using only a single one,
as long as it answers fast and without errors.
Is there a way to get my desired behavior?
Config is free-form lua, so you may e.g. use techniques like in [1],
except with STUB instead of TLS_FORWARD.
[1] https://www.ctrl.blog/entry/kresd-random-dns-forwarding
--Vladimir
14:52
Hallo Vladimir,
thank you for the explanation. I don't really need round robin, if I
know in case of failures of one DNS the Knot-Resolver just picks
another, that is everything I need. I thought round robin helps, but I
just need failure tolerance which is provided. Sorry for a kind of wrong
question.
And thank you also for the interesting blog entry, as I say I don't
really need round robin at the moment, but knowing lua can be used maybe
help for future issues ;-).
Regards
Thomas
>> Vladimír Čunát <vladimir.cunat(a)nic.cz>
02/20/19 1:40 PM >>>
On 2/20/19 1:32 PM, Thomas Belián wrote:
policy.add(policy.suffix(policy.STUB({'$our
ip'}), extraTrees))
Can I put more than one IP at this line to forward the queries? We
have
2 authorative servers, so I want ask both of them
round robin like.
Up to four addresses are supported inside a STUB "command", but the
semantics isn't really round-robin - kresd prefers servers that answer
faster, and there's not much "randomization" so far (I have such
improvements in plans), so it may well end up using only a single one,
as long as it answers fast and without errors.
Is there a way to get my desired behavior?
Config is free-form lua, so you may e.g. use techniques like in [1],
except with STUB instead of TLS_FORWARD.
[1] https://www.ctrl.blog/entry/kresd-random-dns-forwarding
--Vladimir
2132
days inactive
2132
days old
knot-resolver-users@lists.nic.cz
2 comments
2 participants
participants (2)
-
Thomas Belián -
Vladimír Čunát