[Pdns-users] PDNS Auth Zone Distribution in a Global Network?

[Klaus Darilion]

Am 29.06.2018 um 23:23 schrieb Anthony Eden:
> Hello everyone,
>
> I am considering moving some or all of DNSimple's authoritative DNS service back over to PowerDNS within the next 6 months, but before I do so, I'm hoping to get in touch with one or more folks from the PowerDNS community who operate authoritative DNS across multiple geographic regions.
>
> We currently have POPs in San Jose, Chicago, Virginia, Amsterdam, Tokyo, and a new one coming online in Sydney. To distribute zone changes quickly (within 60 seconds) from our Chicago data center we have a home grown zone distribution system where notifications are sent to a zone server within each data center, and that zone server in turn sends out a notice to every name server in its data center. Each name server then queries the zone server for the zone, and the zone server either pulls the zone from memcached and returns it to the name server, which caches it in memory, or the zone server queries our primary data store in Chicago to get the zone.
>
> This system works, however as it is all home grown, it is difficult to maintain and enhance. I am interested in moving away from our custom solution to something off-the-shelf, and I'm looking for recommendations from other operators on what is working for you.
>
> Thanks in advance for your time and your thoughts.

We use the postgresql backend and Slony replication to 36+ slaves 
worldwide. Pushing changes quickly depends on how big your system is 
(number of zones, zone changes). We relaxed the sync settings of slony 
to lower CPU ressources, but are usually within 30seconds. Delay of 
course mostly depends on your PowerDNS query-cache and packet-cache 
settings. Without caching the load on the DB is usually to high if you 
have plenty of queries (which we have).

But i am happy to have a DB-replication which ensures that slaves are in 
sync and we do not have to care about lost NOTIFYs.

Klaus