DNSSEC and Geodns

Stephen John Smoogen smooge at gmail.com
Sat Nov 21 03:36:36 UTC 2009


On Fri, Nov 20, 2009 at 8:27 PM, Nigel Jones <dev at nigelj.com> wrote:
> On Sat, Nov 21, 2009 at 1:18 PM, Stephen John Smoogen <smooge at gmail.com> wrote:
>> On Fri, Nov 20, 2009 at 8:13 PM, Mike McGrath <mmcgrath at redhat.com> wrote:

>>> Ugh, I really don't want to have to choose, nb did great work with getting
>>> dnssec going.
>>
>> I would only do it for a subzone and not for the main one. Basically
>> have ns1/ns2 have the signed zones and the subzones on another one.
> Surely this is going to increase the time needed for clients to
> perform DNS lookups on the content we got GEO-Located (i.e.
> fedoraproject.org/admin.fedoraproject.org)

Usually the time is really pretty small.

> - Nigel
>
> _______________________________________________
> Fedora-infrastructure-list mailing list
> Fedora-infrastructure-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
>



-- 
Stephen J Smoogen.

Ah, but a man's reach should exceed his grasp. Or what's a heaven for?
-- Robert Browning




More information about the infrastructure mailing list