The ungleich DNS infrastructure » History » Revision 3

« Previous | Revision 3/26 (diff) | Next »
Nico Schottelius, 11/06/2018 06:15 PM

The ungleich DNS infrastructure


This document is IN PROGRESS.


  • Every place has 2 redundant caching nameservers.
  • All zones have 3 authorative nameservers, located in 3 different places
  • Important zones (like need to be resolvable, even if a place goes offline
    • For this reason some authorative data needs to be on the caching name servers
    • For this reason we stay with a bind9 based setup for the moment (might change in the future)


In total we are running 5 servers that are responsible for caching and authorative answers:

  • Authorative
    • 1x server in place4 (bind)
    • 1x VRRP IP of routers in place5 (bind)
    • 1x VRRP IP of routers in place6 (bind)
  • Caching
    • 2x server ip of router in place5 (bind)
    • 2x server ip of router in place6 (bind)

How to update the ungleich DNS servers

To update all 5 servers, use:

cdist config d{1..5}

How to use the authorative DNS servers

Add the following to your zone file:

    IN NS
    IN NS
    IN NS

Updated by Nico Schottelius almost 4 years ago · 3 revisions