<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I’ve tested this solution, all works as expected. I have only one problem. nproxy is running with these parameters :</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>nproxy -v --chroot /tmp/ --setuid 108 --setgid 112 --listen-port 55 --origin-address 10.0.0.1 --listen-address SlaveWANIP1 --listen-address SlaveWANIP2 --powerdns-address 10.0.0.11</div><div class=""><div class=""><span class="Apple-tab-span" style="white-space: pre;"> </span>nproxy -v --chroot /tmp/ --setuid 108 --setgid 112 --listen-port 55 --origin-address 10.0.0.1 --listen-address SlaveWANIP1 --listen-address SlaveWANIP2 --powerdns-address 10.0.0.12</div></div><div class=""><div class=""><span class="Apple-tab-span" style="white-space: pre;"> </span>nproxy -v --chroot /tmp/ --setuid 108 --setgid 112 --listen-port 55 --origin-address 10.0.0.1 --listen-address SlaveWANIP1 --listen-address SlaveWANIP2 --powerdns-address 10.0.0.13</div></div><div class=""><div class=""><span class="Apple-tab-span" style="white-space: pre;"> </span>nproxy -v --chroot /tmp/ --setuid 108 --setgid 112 --listen-port 55 --origin-address 10.0.0.1 --listen-address SlaveWANIP1 --listen-address SlaveWANIP2 --powerdns-address 10.0.0.14</div></div><div class=""><br class=""></div><div class="">when I set origin-address with my LB VIP(10.0.0.1) from LAN interface, pdns's behind LB thinks this is host from which it should do AXFR but this is LAN LB IP not Master IP. So I need master IP here but it could not be assigned because it’s in Internet public IP address of another server. Any suggestions how to solve this ?</div><div class=""><div><br class=""></div><div>This is my setup :</div><div><br class=""></div><div>Master (MasterWANIP1 sends notify) -> Slave (SlaveWANIP1/SlaveWANIP2) LB running 4x nproxy (this proxy sends notify requests to LAN nodes) -> SLAVE PDNSs (pool of 4 nodes) (LAN IPs from range 10.0.0.0/24)</div><div><br class=""></div><div>BR,</div><div>Martin</div><div><br class=""></div><div><blockquote type="cite" class=""><div class="">On 27 Feb 2019, at 10:55, Martin Toth <<a href="mailto:snowmailer@gmail.com" class="">snowmailer@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">This is really cool idea, will test it today and let you know if it works.<div class=""><br class=""></div><div class="">Stay tuned!</div><div class=""><br class=""></div><div class="">BR. Martin<br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 27 Feb 2019, at 06:34, <a href="mailto:abang@t-ipnet.net" class="">abang@t-ipnet.net</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Hello Martin,</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Am 26. Februar 2019 17:07:25 MEZ schrieb Martin Toth <</span><a href="mailto:snowmailer@gmail.com" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">snowmailer@gmail.com</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">>:</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Hi,<br class=""><br class="">Thanks for your interest. I am using dnsdist as a loadbalancer and<br class="">slave nodes are in DMZ behind dnsdist. Only dnsdist server has public<br class="">IPs that can be reached from Master public IP (master is located in<br class="">other datacentre).<br class="">Is my usecase not designed well? I thought dnsdist was designed to be<br class="">used as LB for DNS services. Do you have any suggestions how to solve<br class="">this or what workround should I use ?<br class=""></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Did not try it myself, but could be an option:<span class="Apple-converted-space"> </span></span><a href="https://doc.powerdns.com/authoritative/manpages/nproxy.1.html" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://doc.powerdns.com/authoritative/manpages/nproxy.1.html</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class="">Thanks.<br class=""><br class="">BR,<br class=""><br class=""><blockquote type="cite" class="">On 26 Feb 2019, at 16:59, Remi Gacogne <<a href="mailto:remi.gacogne@powerdns.com" class="">remi.gacogne@powerdns.com</a>><br class=""></blockquote>wrote:<br class=""><blockquote type="cite" class=""><br class="">Hi Martin,<br class=""><br class="">On 2/26/19 3:58 PM, Martin Toth wrote:<br class=""><blockquote type="cite" class="">I just want to ensure myself how NOTIFY distribution in DNSDIST<br class="">exactly works. My setup looks like this - MASTER -> DNSDIST -> SLAVE<br class="">PDNSs (pool of 4 nodes)<br class=""><br class="">My Question is if MASTER will send NOTIFY to DNSDIST, will DNSDIST<br class="">redistribute these NOTIFY to all SLAVES in DNSDIST backend? How to I<br class="">achieve situation that all slaves in dnsdist backend will be<br class=""></blockquote></blockquote>notified<br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">of zone change on MASTER?<br class=""></blockquote><br class="">I'm afraid you can't, dnsdist can route a query only to a single<br class="">backend, with the exception of the TeeAction, but I would advise<br class=""></blockquote>against<br class=""><blockquote type="cite" class="">trying to use it for that case.<br class="">Is there a reason your master doesn't speak to the slaves directly?<br class=""><br class="">Best regards,<br class="">--<span class="Apple-converted-space"> </span><br class="">Remi Gacogne<br class=""><a href="http://powerdns.com/" class="">PowerDNS.COM</a> BV - <a href="https://www.powerdns.com/" class="">https://www.powerdns.com/</a><br class=""></blockquote></blockquote><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Winfried<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">dnsdist mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:dnsdist@mailman.powerdns.com" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">dnsdist@mailman.powerdns.com</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://mailman.powerdns.com/mailman/listinfo/dnsdist" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://mailman.powerdns.com/mailman/listinfo/dnsdist</a></div></blockquote></div><br class=""></div></div></div></blockquote></div><br class=""></div></body></html>