[dnssec-deployment] split-view DNSSEC Best Current Practices

Edward Lewis Ed.Lewis at neustar.biz
Wed Jan 12 14:48:24 EST 2005


At 11:44 -0500 1/12/05, Suresh Krishnaswamy wrote:

>The use of split-views is quite pervasive in the Internet today and this
>BCP provides recommendations for what would be the best way to
>configure this setup with DNSSEC also present in the picture
>[short answer = DON'T :)].

I suppose I need to read this because I was shocked (shocked!!!) to see this.

It's been ~ 10 years since I last worked in an environment that DID 
NOT use split-brain.  My personal opinion is that split-brain DNS is 
essential, more so than even dynamic update.
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                +1-571-434-5468
NeuStar

"A noble spirit embiggens the smallest man." - Jebediah Springfield



More information about the Dnssec-deployment mailing list