[Pdns-users] DNAME randomly failing on Linux clients

[Brian Candler]

On 06/04/2022 10:44, Adam Cecile wrote:
>> If at all possible, I'd suggest you simply run auth and recursor 
>> bound to separate IP addresses - whether that be on the same host, or 
>> in VMs or containers.  Then you point your clients at your recursor 
>> IP(s), your NS records at your auth server hostname(s), and dnsdist 
>> isn't required.
> Well that'd make things more complicated because the server running 
> authoritative do need to use recursor facilities too :D

That's not an issue.

If the server needs to *use* recursor facilities, then you point its 
resolv.conf to whatever IP address your recursor is bound to - whether 
this is on the same host, or a different host makes no difference.

Normally you'd dedicate a server to auth (or VM or container), and point 
to a separate recursor - well, two recursors for redundancy.  But if you 
run both auth and recursor on the same server/VM, but bound to different 
IPs, that will work too.