Re: two bind9 masters

> On Thu, Oct 11, 2007 at 12:01:52AM +0200, Wojciech Ziniewicz wrote:

>> One server is managed through ISPconfig software. It has about 80
>> domains in it now , and works well but for the production use (we're
>> now preparing for moving from QA to prod.) there must be 2 or more DNS
>> servers for those domains. As the old servers will be shut down, new
>> servers must take their role.

We decided not to use bind's replication mechanism because it required us to add zones to each server by hand.

For example in our named.inc

	zone "lbgc.org" {
	        type master;
	        file "db.lbgc";
	};

Other people have opted not use bind's replication mechanism because there have been security issues.

If it is helpful, our rysnc script is attached.

#!/usr/bin/perl -w

# $Revision: 1.9 $
# $Source: /usr/local/cvsroot/boxes/scripts/some/dnssync,v $
# %Location: /usr/local/sbin/
# %Servers: brave csl-dns-01

use warnings;
use strict;

##
# Configuration
##

# rndc command-line options
my $RNDC         = '/usr/sbin/rndc';

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.debian.org Links debian-announce debian-apache debian-arm-changes debian-beowulf debian-boot debian-cd debian-cd-vendors debian-changes debian-changes-digest debian-isp debian-kde debian-laptop debian-mirrors-announce debian-news debian-security debian-security-announce debian-testing debian-user debian-user-digest Request more information about Pantek

# rsync command-line options

my $RSYNC         = '/usr/bin/rsync';
my $RSYNC_OPTIONS = "-azql --delete  -e 'ssh -i /var/cache/bind/.ssh/id_dsa' ";
my $EXCLUDE       =
'--exclude=old/ --exclude=named.conf* --exclude=named.options --exclude=rndc.*';
my $SOURCE      = '/etc/bind/';

my $DIG = '/usr/bin/dig';

# Hash of each hostname and its BIND config directory my %HOST_CONFIGDIR = (

    'csl-dns-01.thecsl.org' => '/etc/bind',
    'csl-dns-02.thecsl.org' => '/usr/local/etc/bind',
    'csl-dns-03.thecsl.org' => '/etc/bind',

##
# Main
##

    print "\nReloading localhost\n";
    print `$RNDC $RNDC_OPTIONS localhost $RNDC_COMMAND`;

    foreach my $host ( sort keys %HOST_CONFIGDIR ) {

        print "\n$host";
        print "\tcopy files...";

        my $cmd = "$RSYNC $RSYNC_OPTIONS ";
        $cmd .= "$EXCLUDE $SOURCE ";
        $cmd .= "${REMOTE_USER}\@$host:$HOST_CONFIGDIR{$host}";
        print `$cmd`;
        print "\treload server...";
        system("$RNDC $RNDC_OPTIONS $host $RNDC_COMMAND > /dev/null") == 0
          or warn "FAILED";

        print "\ttest dns is up...";
        system("$DIG \@${host} thecsl.org > /dev/null") == 0
          or warn "FAILED";

    print "\n";

}

-- 
To UNSUBSCRIBE, email to debian-isp-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org