Multiple DA, DNS sync & config

[HKI]

Hello,

Here is a simple example of configuration

Server 1 w/ DirectAdmin as main (NS)
Server 2 w/ Directadmin as seconday (NS2)

Now when we have third Server w/ DA, how this should be configured?

We edit third DA settings, so that DNS settings are ns and ns2 to first servers, but how sync should be solved?

Server 3 we add to sync w/ Server 1 and Server 2.
Server 1 we add to sync w/ Server 3
Server 2 we add to sync w/ Server 3.

Is this correct?

As named is running on third server also, do we just disable port 53 from firewall, as it's not used externally?

Please advise.
Thank you!
HKI

 

[nobaloney]

The easy way to do this with DirectAdmin's multi-server option is to set up all three servers, and then just give out the IP#s or nameserver names you want. You can certainly give out all three; in fact there's an RFC somewhere that recmmends three nameservers.

Jeff

 

[HKI]

Thank you for reply.

Actually what I mean, is that what we do with server that are not actually marked as Nameservers.

For example we have 10 server and 2 of them are NS. But we have to run bind9 for DA other servers to work, what we should configure the rest 8 servers and should we block incoming 53 port for those 8 servers?

Thanks,
HKI

 

[Michael.Terence]

Thank you for reply.

Actually what I mean, is that what we do with server that are not actually marked as Nameservers.

For example we have 10 server and 2 of them are NS. But we have to run bind9 for DA other servers to work, what we should configure the rest 8 servers and should we block incoming 53 port for those 8 servers?

Thanks,
HKI

Exactly. The license page doesn't say you can't, but it doesn't say you can either. The same goes for the code 500 licenses (VPS Licenses). I have those now too, could I use one of those on my shared server? -- I never would, because I prefer the owned licenses... but I think these are both valid questions that are in a grey area and could use answering.

 

[nobaloney]

I thought I understood HKI's email until I read Michael's reply; obviously I'm missing something.

Do do NOT have to run BIND on your local servers if you don't want to, but if you don't, then how are you going to configure the zones on the two nameservers?

If you're running multi-server you can block port 53, and still get the zones onto the nameservers that way, but to do so you'll need licenses on your two servers which are only nameservers.

I have one client who buys licenses for his nameservers and runs multi-server to configure DNS on all servers.

I have many clients who use Master2Slave DNS Replicator to manage DNS automatically on his DirectAdmin servers and automate slaving to his other nameservers, using the nameservers on the DirectAdmin servers as hidden masters.

You cannot use VPS licenses on anything but VPS servers. Otherwise, Michael, you've confused me .

Jeff