You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2019/01/10 16:48:11 UTC
[GitHub] JBevillC commented on issue #3184: WIP Add CDN-in-a-Box Dynamic IPs
JBevillC commented on issue #3184: WIP Add CDN-in-a-Box Dynamic IPs
URL: https://github.com/apache/trafficcontrol/pull/3184#issuecomment-453166973
Rob,
I few things I've noticed when testing this PR:
1) Serial number of all zone files will need to be incremented each time the DNS server is restarted. Otherwise future reload/restart(s) of the bind server will not pick up any new additions.
2) The size of the IPV4 and IPV6 subnets is not known to the DNS server and must be parsed out of $(ip addr list). By default, docker allocates a class 16 on 172.0.0.0 starting with 172.0.16.0/16 and increments the third octet for each new dynamic network created. This isn't always the case as a user can configure the default subnet size to be much smaller. The IPV6 default subnet allocation is a bit more difficult to determine and depends on the subnet configured in /etc/docker/daemon.json.
3) Using a pull method for discovering IPs of services slows down the start of CIAB. A push model, imo, would be more suitable for adding stuff like DNSSEC DS records as they change within trafficops. There would also be no delay without starting up as each container would push their IP configuration and DS record (any any CNAMES) to the DNS server on startup. My next task is to add DNSSEC support and it will need the ability to push a DS record into the TLD of the CDN.
If you are okay with a push model, I think I can have something implemented in about 16 working hours.
Thoughts?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services