Re: Bind recursion - ReadList.com

7 msg	private address 192.168.x.x or 10.x.x.x on a pu...
4 msg	Distributed DNS Tools?
7 msg	query (cache) denied messages
2 msg	DDNS Throttle updates
15 msg	Name based hosts and bind
2 msg	problem with a dns server bind
2 msg	Nslookup and dig
4 msg	dns_master_load: root.servers:85: isc_lex_getto...

Bind recursion
\ Ghworg (22 Apr 2008)
. \ Barry Margolin (22 Apr 2008)

4 msg	Dig giving different output?
1 msg	Update from the LISA '08 Program Chair
5 msg	Not at 'wits end' but still a bit confused......
3 msg	BIND 9 unix domain sockets
9 msg	RRSet size limitation lower than predicted by R...
3 msg	best practices dealing with lame delegations
3 msg	Updating Dns srv records via linux client?
1 msg	un-subscribe
3 msg	Register a new host
4 msg	Forwarding for authoritative domain.
1 msg	deleted bind9 files debian

Subject:	Re: Bind recursion
Group:	Bind-users
From:	Barry Margolin
Date:	22 Apr 2008

In article <fuj9t6$p6a$1>, Ghworg wrote:

> I've tried to find an answer to this, but I doesn't seem to be
> anywhere. Basically, I'm setting up two views - internal and external.
> Internal is for my internal clients, with full zone views, and
> recursion on. External, is for Internet users, has only my external
> hosts, with no recursion. I have one small problem....In one of my
> zones, I have a subdomain that is delegated out to a load balancer
> that I have on site. Here is an example....
>
> zone.com - ns1 handles
> lb.zone.com - load balancer handles
>
> So, a query for server1.lb.zone.com, would go to ns1, then get
> delegated to the load balancer, but this does not work unless I turn
> on recursion. I've tried forwarders, and creating master zones with
> the load balancer NS records, and a couple of other things. Nothing
> seems to work. If I point an external machine to ns1, it always fails,
> without recursion.
>
> Is there any way get get this scenario to work, without allowing
> recursion on the outside?

Can external users query the load balancer directly?

I'm not sure how turning on recursion could help. Remote caching
servers don't have the Recursion Desired flag in their queries, so
you'll never recurse for those lookups.

My guess is that you were testing this by doing "dig server1.lb.zone.com
@yourserver". This won't work because dig doesn't act like a caching
server, it doesn't follow NS records. You need to test by querying an
outside caching server.

--
Barry Margolin, barmar
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***