Re: NTP through DNS?

2018-09-19 Thread Kevin Darcy
I'll just toss in the factoid that NTP can be run on multicast or anycast, which may negate some of the motivation for using a DNS name to access the service. - Kevin On Wed, Sep 19, 2018 at 11:38 AM Andrew Latham wrote: > On Wed, Sep 19, 2018 at 10:19 AM Ray Bel

Re: NTP through DNS?

2018-09-19 Thread Andrew Latham
On Wed, Sep 19, 2018 at 10:19 AM Ray Bellis wrote: > On 19/09/2018 15:59, Mauricio Tavares wrote: > > >> An NTP serice doesn't belong to a domain, so maybe not (I don't know of > >> one off my mind). > >> > > Not necessarily; I can name a few universities and business who > > offer their ow

Re: NTP through DNS?

2018-09-19 Thread Ray Bellis
On 19/09/2018 15:59, Mauricio Tavares wrote: >> An NTP serice doesn't belong to a domain, so maybe not (I don't know of >> one off my mind). >> > Not necessarily; I can name a few universities and business who > offer their own NTP servers to their internal systems. AFAIK, this is > consider

Re: NTP through DNS?

2018-09-19 Thread Mauricio Tavares
On Wed, Sep 19, 2018 at 11:12 AM, Andrew Latham wrote: > Additionally you may route all outbound requests for NTP to a local source > found from an DNS lookup. > > Benefits could be: > * Control of time sources (correct a hardcoded address that is no longer > valid) > * Mitigate attack vectors > *

Re: NTP through DNS?

2018-09-19 Thread Andrew Latham
Additionally you may route all outbound requests for NTP to a local source found from an DNS lookup. Benefits could be: * Control of time sources (correct a hardcoded address that is no longer valid) * Mitigate attack vectors * Mitigate bufferbloat DNS is an important piece to this puzzle and SRV

Re: NTP through DNS?

2018-09-19 Thread Mauricio Tavares
On Wed, Sep 19, 2018 at 10:12 AM, Andrew Latham wrote: > You can add SRV records for NTP to your domain if that is what you are > asking. > Thanks. I was trying to query for it using dig and then realized I did not know if that is doable. On Wed, Sep 19, 2018 at 10:16 AM, Mukund Sivaraman

Re: NTP through DNS?

2018-09-19 Thread Mukund Sivaraman
On Wed, Sep 19, 2018 at 10:08:34AM -0400, Mauricio Tavares wrote: > Stupid question: can I publish/query the NTP server through DNS the > same way I can ask who is doing LDAP? An NTP serice doesn't belong to a domain, so maybe not (I don't know of one off my mind). For provisioning, there are DHC

Re: NTP through DNS?

2018-09-19 Thread Andrew Latham
You can add SRV records for NTP to your domain if that is what you are asking. On Wed, Sep 19, 2018 at 9:09 AM Mauricio Tavares wrote: > Stupid question: can I publish/query the NTP server through DNS the > same way I can ask who is doing LDAP? > ___ >

NTP through DNS?

2018-09-19 Thread Mauricio Tavares
Stupid question: can I publish/query the NTP server through DNS the same way I can ask who is doing LDAP? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org h

Re: load balancing

2018-09-19 Thread Matus UHLAR - fantomas
On 18.09.18 14:39, SIMON BABY wrote: I am looking DNS RR distribution. (DNS Round Robin Load distribution). Round robin DNS is often used to load balance requests between a number of Web servers . For example, a company has one domain name and three iden