Stub zone

[Wensi Peng]

Hello:

Two questions:

Current situation in the domain "mycompay.ca" of win2k3 domain:

All windows servers and XPs point to two UNIX DNS servers. The UNIX DNS
servers own "mycompany.com" for legacy hosts and have stub zone transfer
configured for "mycompany.ca" for windows clients.

The UNIX DNS servers request "mycompay.ca" zone transfer from one single
Win2K3 root DNS, expired interval on the Win2K3 DNS is 1 day.

Potential problem: single point failure if the W2k3 DNS server fails.



Suggested solution:

(1) add one more Win2K3 root DNS server into Unix DNS stub zone.

(2) Increase the expired interval from 1 day to e.g. 3 or 7 days. Does
it will affect any replication on the root domain and its child domains? My
root domain "mycompany.ca" is a place holder.It have child domains.



Should the two solutions solve the problem?





Thanks,

Wensi

 

[Kevin D. Goodknecht Sr. [MVP]]

In

Hello:

Two questions:

Current situation in the domain "mycompay.ca" of win2k3
domain:

All windows servers and XPs point to two UNIX DNS
servers. The UNIX DNS servers own "mycompany.com" for
legacy hosts and have stub zone transfer configured for
"mycompany.ca" for windows clients.

The UNIX DNS servers request "mycompay.ca" zone transfer
from one single Win2K3 root DNS, expired interval on the
Win2K3 DNS is 1 day.

Potential problem: single point failure if the W2k3 DNS
server fails.



Suggested solution:

(1) add one more Win2K3 root DNS server into Unix DNS
stub zone.

(2) Increase the expired interval from 1 day to e.g.
3 or 7 days. Does it will affect any replication on the
root domain and its child domains? My root domain
"mycompany.ca" is a place holder.It have child domains.

If the zone on the Win2k3 is AD integrated, and you add more AD integrated
DNS servers, the NS records for the additional AD DNS servers are
automatically added to the zone which adds the additional NS records to the
Stub zone on the BIND DNS.
If all DNS servers are Win2k3, you can change the replication scope on the
Win2k3 so that the zone is replicated to all DNS servers in the AD Forest.
But, the zone will only replicate to Win2k3 DCs and DNS servers.