[dnssec-deployment] split-view DNSSEC Best Current Practices
Edward Lewis
Ed.Lewis at neustar.biz
Wed Jan 12 14:48:24 EST 2005
At 11:44 -0500 1/12/05, Suresh Krishnaswamy wrote:
>The use of split-views is quite pervasive in the Internet today and this
>BCP provides recommendations for what would be the best way to
>configure this setup with DNSSEC also present in the picture
>[short answer = DON'T :)].
I suppose I need to read this because I was shocked (shocked!!!) to see this.
It's been ~ 10 years since I last worked in an environment that DID
NOT use split-brain. My personal opinion is that split-brain DNS is
essential, more so than even dynamic update.
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis +1-571-434-5468
NeuStar
"A noble spirit embiggens the smallest man." - Jebediah Springfield
More information about the Dnssec-deployment
mailing list