Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




firewall-wizards logo Firewall Wizards mailing list archives

Re: failover and dns
From: "Steven W. Engle" <sengle () dhtinc com>
Date: Thu, 2 Apr 1998 15:04:08 -0600

Dear All,

[snip]

Company A now wants to improve resilliance. The have datacenters in
three
continents and so the basic idea is to put up three copies. Now the dns
entry will
point to one of them, if that fails then the contents of the dns will be
changed (not
by hand) to point at the secondary etc. Use a very short ttl on the dns
entry and
things should start again after a short while.

It strikes me that a round-robin DNS might serve you well here. To my
knowledge, round-robin DNS won't handle "if A fails then try B" -- it will
cycle through all 'X' datacenters/sites, distributing the connections
amoung them. In this scenario, if a particular site is not available, the
user would have to try again later and most likely (with a short TTL) get
sent to another site.

Are there round-robin DNS implementations that perform "aliveness" tests
and drops unavailable sites out of the round-robin?

--
Steven W. Engle                          Voice: (281) 333-9085
Diversified High Technologies, Inc.        Fax: (281) 333-9087
1350 Nasa Road One, Suite 105           http://www.dhtinc.com/
Houston, TX  77058                    mailto:sengle () dhtinc com




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]