nanog mailing list archives
Re: DNS pulling BGP routes?
From: Bill Woodcock <woody () pch net>
Date: Thu, 7 Oct 2021 18:44:37 +0200
On Oct 7, 2021, at 6:25 PM, Jean St-Laurent via NANOG <nanog () nanog org> wrote: Nice document. In section 2.5 Routing, this is written: Distributing Authoritative Name Servers via Shared Unicast Addresses... organizations implementing these practices should always provide at least one authoritative server which is not a participant in any shared unicast mesh.
This was superstition, brought forward from 1992 by the folks who were yelling “damned kids get offa my lawn” at the time. There’s no reason to include a unicast address in an NS set in the 21st century, and plenty of reasons not to (since it’ll be very difficult to load-balance with the rest of the servers). But one should NEVER NEVER depend on a single administrative or technical authority for all your NS records. That’s what shot Facebook in the foot, they were trying to do it all themselves, so when they shot themselves in the foot, they only had the one foot, and nothing left to stand on. Whereas other folks shoot themselves in the foot all the time, and nobody notices, because they paid attention to the spirit of RFC 2182. -Bill
Attachment:
signature.asc
Description: Message signed with OpenPGP
Current thread:
- Re: DNS pulling BGP routes?, (continued)
- Re: DNS pulling BGP routes? Sabri Berisha (Oct 18)
- Re: DNS pulling BGP routes? Michael Thomas (Oct 18)
- Re: DNS pulling BGP routes? Mike Hammett (Oct 18)
- Re: DNS pulling BGP routes? Sabri Berisha (Oct 18)
- Re: DNS pulling BGP routes? Michael Thomas (Oct 18)
- Re: DNS pulling BGP routes? Sabri Berisha (Oct 18)
- Re: DNS pulling BGP routes? Michael Thomas (Oct 18)
- Re: DNS pulling BGP routes? Matthew Petach (Oct 18)
- Re: DNS pulling BGP routes? William Herrin (Oct 09)
- RE: DNS pulling BGP routes? Jean St-Laurent via NANOG (Oct 07)
- Re: DNS pulling BGP routes? Bill Woodcock (Oct 07)
- RE: DNS pulling BGP routes? Jean St-Laurent via NANOG (Oct 07)
- Re: DNS pulling BGP routes? Owen DeLong via NANOG (Oct 10)
- Re: DNS pulling BGP routes? Masataka Ohta (Oct 11)
- Re: DNS pulling BGP routes? Matthew Petach (Oct 06)
- Re: DNS pulling BGP routes? Sabri Berisha (Oct 06)
- Re: DNS pulling BGP routes? Jon Lewis (Oct 06)
- Re: DNS pulling BGP routes? Hank Nussbacher (Oct 06)
- Re: DNS pulling BGP routes? Mark Tinka (Oct 06)
- RE: DNS pulling BGP routes? Jean St-Laurent via NANOG (Oct 07)
- Re: DNS pulling BGP routes? Mark Tinka (Oct 07)