nanog mailing list archives

Re: About.com/NYTimes admins about?


From: "Christopher Morrow" <morrowc.lists () gmail com>
Date: Wed, 1 Oct 2008 09:55:27 -0400

On Tue, Sep 30, 2008 at 5:04 PM, Brendan Cleary <cleary () nytimes com> wrote:
I worked with Chris on this outside of the list. Replying here just to close
the loop in case anyone else was interested.

This situation is explained in this Case Study:
http://support.citrix.com/article/CTX117947

The key sentence being:
"In NetScaler software release 7.0, when the DNS server looks up AAAA
records, the response was "0" and errors "0". However, in NetScaler software
release 8.0, with standard response "0", the NetScaler appliance sends the
delegation records to root. "

To summarize, if you don't have your NS records in place on the Netscalers,
you will see a loop for AAAA queries (root>auth>netscaler>root....),
eventually resulting in a SERVFAIL.

Thanks Brendan! Hopefully Citrix can improve their standard config for
this sort of deployment to make this a little simpler? I can't believe
NYTimes is the only user of Netscalers for this function.

-Chris


Current thread: