Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Dec 2001 10:59:26 +1100
From:      Enno Davids <nconedd@webjump.national.com.au>
To:        Colin Campbell <sgcccdc@citec.qld.gov.au>
Cc:        Jeff Lasman <jblists@nobaloney.net>, freebsd-isp@FreeBSD.ORG
Subject:   Re: Using DNAT and DNS round-robin
Message-ID:  <20011217105926.K16592@webjump.national.com.au>
In-Reply-To: <Pine.BSF.4.33.0112170945380.23989-100000@guru.citec.qld.gov.au>; from sgcccdc@citec.qld.gov.au on Mon, Dec 17, 2001 at 09:49:19AM %2B1000
References:  <3C1D0EF1.783B48AD@nobaloney.net> <Pine.BSF.4.33.0112170945380.23989-100000@guru.citec.qld.gov.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Dec 17, 2001 at 09:49:19AM +1000, Colin Campbell wrote:
|On Sun, 16 Dec 2001, Jeff Lasman wrote:
|> Derrick John Klise wrote:
|>
|> > IIRC, something like:
|> >
|> >   monkey.example.net    IN A   192.168.0.1
|> >                         IN A   192.168.0.2
|> >                         IN A   192.168.0.3
|>
|> Thanks.  Finally found it on page 259 of DNS and Bind.
|>
|> > > Is there a way to handle high-availability strictly in DNS?
|> >
|
|There used to be (still is? - cou;dn't find it) a paper on the ISC web
|site (www.isc.org) exlpaining why using DNS for HA was pointless. If
|memory serves, the main reasons were
|
|- most browsers cache DNS lookups and so a system that goes down will
|  simply appear as unreachable to the browser.
|
|- most browsers ignore TTLs.

FWIW, squid (and possibly other proxies) when faced with a list of address
for a name will retry on the next address in the list when they get a hard
error on the one they're using. Its still not HA, but its better than you
thought.

The real answer is hardware load balancers like F5, Foundry or Rad.


Enno.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011217105926.K16592>