djbdns
[Top] [All Lists]

dnscache external cache AND forwarding cache?

To: dns@list.cr.yp.to
Subject: dnscache external cache AND forwarding cache?
From: djb@xmission.com
Date: Wed, 24 Jan 2007 16:47:19 -0700
Delivered-to: sp-com-lists@consult.net
Delivered-to: gmail-djbdns@securepoint.com
Delivered-to: sp.com.list@gmail.com
Delivered-to: mailing list dns@list.cr.yp.to
Mailing-list: contact dns-help@list.cr.yp.to; run by ezmlm
User-agent: Internet Messaging Program (IMP) H3 (4.0.4)
Hi guys. I have been through the documentation on Dan's website and haven't been able to find an answer to this question. Even help attaching the right names to attach to components in the set up may help me.

Executive Summary
I want to introduce a local nameserver system to resolve hosts on xyz.com that will then forward requests it doesn't have an answer to to other nameservers that also resolve hosts for xyz.com. Do you have any doc that can tell me how to do this?

Full
I work for xyz.com. xyz.com has an internal network and they have their own dns servers that I am NOT in control of. I administer some development machines in xyz.com. I have recently introduced some VMWare host machines to my area. I have virtual machines that come and go frequently and I want to assign them locally accessible xyz.com names, where any machine on my local subnet (virtual or not) can resolve the name of a virtual machine.

I have set up dnscache and tinydns on one machine machine, on two different IP addresses. I have allowed any local subnet traffic to access it. I edited the /etc/dnscache/root/servers/@ file to include three dns servers, firstly the tinydns for the local network. Then the two other servers that I don't control from xyz.com.

When I nslookup xxx.xyz.com [dns.cache.ip.address] it will work from any machine and will serve a response from the tinydns (via dnscache). However, replacing xxx.xyz.com with a name that can only be resolved from one of the other two xyz.com name servers, it does not get resolved. So if I add my dnscache nameserver address to the dns list to a machine in the domain, his name resolution of the outside world is cut off but he can get my local names.

Before you say duh.... I am just asking is there a way to make this work without a subdomain? I would really like it to! As a last resort, I suppose I could introduce a vm.xyz.com domain, but I would like to avoid that so that I can make vm's more indistinguishable from physical hosts.

I have tried: echo 1 > /etc/dnscache/env/FORWARDONLY; svc -d /service/dnscache; svc -u /service/dnscache. It didn't really feel like it would work to me and it didn't.

Ideas?

<Prev in Thread] Current Thread [Next in Thread>