Good operational network design calls for network segmentation; proper segmentation implies the functions of DDI to be technically (as opposed to organizationally) managed by segment. This would include actual recursing resolvers and DHCP services, not forwarders, at the segment edge.

A lot of people are invested in solutionism via centralization so this is inherently controversial.

On Wed, 8 Jan 2025, Karol Nowicki via bind-users wrote:
Does a good practice recommend to split running ISC Bind and DHCP into two different machines or make DNS+DHCP running on same server is allowed ?

What allows you do to the best job with logging, according to your policies on observability?

--

Fred Morris

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to