[nsd-users] Question about response source address and dynamic interfaces

[Gavin Brown]

Hi there,

I have a FreeBSD box (hostA) running NSD. It has a management address
(10.0.0.2) and a service address (10.0.0.3). It is part of a clustered
pair with a Linux machine (hostB) that has a management address
(10.0.0.4) and a service address (10.0.0.5). DNS queries are sent to the
two service addresses. Heartbeat is used to co-ordinate the pairs: if
hostB goes offline, then the service address (10.0.0.5) is brought up on
hostA so that it can answer queries, and vice versa.

The problem is this: without an ip-address entry in nsd.conf, responses
are sent from the management address (10.0.0.2) since that is the
"primary" interface of the host. I can fix this during normal operations
by adding an ip-address entry for 10.0.0.3.

However, during failover, queries sent to 10.0.0.5 will be answered with
the wrong source address. Again, I could fix this using an ip-address entry.

But - when the machine boots, this IP address isn't assigned to hostA,
so if it appears in nsd.conf, NSD will refuse to start. BIND (which I'm
using on hostB) doesn't have this problem.

Has anyone else solved this problem? Or do I need to write scripts to
munge nsd.conf and restart it during failover/failback?

Thanks,

-- 
Gavin Brown
Chief Technology Officer
CentralNic Ltd
Innovative, Reliable and Flexible Registry Services
for ccTLD, gTLD and private domain name registries
https://www.centralnic.com/

CentralNic Ltd is a company registered in England and Wales with company
number 4985780. Registered Offices: 35-39 Moorgate, London, EC2R 6AR.