From 49cc671d5f128918b84d8e6ed30aedde817ce15f Mon Sep 17 00:00:00 2001 From: burble Date: Sat, 8 Jun 2019 16:28:21 +0100 Subject: [PATCH] Update 'user/pages/01.home/dns/default.md' --- user/pages/01.home/dns/default.md | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/user/pages/01.home/dns/default.md b/user/pages/01.home/dns/default.md index 5047b98..90f22dd 100755 --- a/user/pages/01.home/dns/default.md +++ b/user/pages/01.home/dns/default.md @@ -10,7 +10,7 @@ burble.dn42 DNS services # DNS Services -burble.dn42 DNS services are anycast across every node to provide fast, local responses network wide +burble.dn42 DNS services are anycast across every node to provide fast, local responses network wide. ## Authoritative DNS Service @@ -34,6 +34,7 @@ Forwarding is provided by the recursive service, dns.burble.dn42.* * .dn42 * .recursive-servers.dn42 * .delegation-servers.dn42 +* .registry-sync.dn42 * d.f.ip6.arpa. * 20.172.in-addr.arpa. * 21.172.in-addr.arpa. @@ -61,7 +62,11 @@ The root zone also includes stubs for resolving domains in networks associated t | dns.burble.dn42
b.recursive-servers.dn42| 172.20.129.2
fd42:4242:2601:ac53::53 |
dns.burble.dn42 is a caching, recursive DNS service for DN42 related zones using -the burble.dn42 authoritative service as a local root zone. +the burble.dn42 authoritative service as a local root zone. By issuing parallel queries +across five regional masters, the recursive service takes advantage of the burble.dn42 global +scale to reduce latency and avoid local connectivity problems. + + The recursor is DNSSEC enabled and validates all queries. #### Using the recursive DNS service @@ -111,13 +116,21 @@ nameserver 172.20.20.65 ## Implementation The DNS service is implemented as a tiered, anycast service with each node -in the network providing a local cache in front of regional, master nodes. +in the network providing a local cache in front of five, regional, master nodes. #### Edge Nodes -Each node in the network runs [dnsdist](https://dnsdist.org/), which forwards -queries to regional master nodes and then caches the responses to provide -a fast, local access to DNS data. +The ns1.burble.dn42 authoritative service is provided by [dnsdist](https://dnsdist.org/). +Queries are forwarded to the nearest regional master node and responses are then cached. +If the regional master is not available, the next nearest will be queried until a response is found. + +The dns.burble.dn42 recursive service is provided by [dnsmasq](http://www.thekelleys.org.uk/dnsmasq/doc.html) +configured using the 'all-servers' mode. Queries are forwarded to all 5 regional masters in parallel +and the first response received is then returned. This approach ensures users get the lowest latency +results possible, regardless of location, and that any local connectivity issues do not impact the results. + +Recursive queries are cached on the edge nodes and master nodes, creating a network wide cache +of results across all users of the service. Anycast routes to the DNS servers are advertised to the main Bird2 instance using [GoBGP](https://github.com/osrg/gobgp) and a health checking script.