Good operational network design calls for network segmentation; proper
segmentation implies the functions of DDI to be technically (as opposed to
organizationally) managed by segment. This would include actual recursing
resolvers and DHCP services, not forwarders, at the segment edge.
A lot of people are invested in solutionism via centralization so this is
inherently controversial.
On Wed, 8 Jan 2025, Karol Nowicki via bind-users wrote:
Does a good practice recommend to split running ISC Bind and DHCP into
two different machines or make DNS+DHCP running on same server is
allowed ?
What allows you do to the best job with logging, according to your
policies on observability?
--
Fred Morris
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users