> On Feb 22, 2020, at 19:01, Tony Finch <d...@dotat.at> wrote:
>
> Evan Hunt <e...@isc.org> wrote:
>>
>> CNAME at the apex wasn't really the problem. Getting browsers to display
>> content from the right CDN server was the problem.
>
> My interest in ANAME is basically nothing to do with CDNs. I want my users
> to be able to configure aliases by name or address without having to deal
> with incomprehensible restrictions.

I had a customer once who was interested in ANAME-like behaviour as a
means of pushing DNS responses from their authority servers located in
their own data centres to commercial DNS provider authority servers,
where resolvers might find them more reliably.

The data centre/origin authority servers in question were load
balancers ("GSLB") that synthesised responses based on real-time
parameters that were not trivial to reproduce in commercial enterprise
DNS services.

In effect, queries from the world would be handled by the enterprise
DNS service infrastructure and the responses would be provisioned from
the customer-maintained origin servers using exactly the DNS protocol.

This provided a mechanism to de-risk the customer-maintained origin
servers which were otherwise seen as at risk from DDoS.


Joe

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to