Re: Adding/removing name servers under DNSSEC

2017-03-06 Thread Mark Andrews
In message , Mathew Ian Eis writes: > To clarify this step *You update the NS records (parent and child)* - you > add NS records for new nameservers to parent and child (at approximately > the same time), but do not remove NS records for old nameservers (until > after all cached records expire).

Re: Adding/removing name servers under DNSSEC

2017-03-06 Thread Mathew Ian Eis
users@lists.isc.org" Subject: Re: Adding/removing name servers under DNSSEC In message <924327f5-6d1d-49f4-80c1-b1a2c539f...@nau.edu>, Mathew Ian Eis writes: > Hi BIND, > > Hoping someone in the community will have experience with this. > > We a

Re: Adding/removing name servers under DNSSEC

2017-03-06 Thread Mark Andrews
In message <924327f5-6d1d-49f4-80c1-b1a2c539f...@nau.edu>, Mathew Ian Eis writes: > Hi BIND, > > Hoping someone in the community will have experience with this. > > We are looking to migrate off a set of nameservers to another set of > nameservers. For all practical considerations, both sets of s

Adding/removing name servers under DNSSEC

2017-03-06 Thread Mathew Ian Eis
Hi BIND, Hoping someone in the community will have experience with this. We are looking to migrate off a set of nameservers to another set of nameservers. For all practical considerations, both sets of servers are slave to the same hidden master, which yields interesting considerations that are