m (Infrastructure/SOP/DNS moved to DNS Infrastructure SOP: Natural language title) |
(Update ns info.) |
||
| Line 7: | Line 7: | ||
Owner: Fedora Infrastructure Team | Owner: Fedora Infrastructure Team | ||
Contact: #fedora-admin, sysadmin-main | Contact: #fedora-admin, sysadmin-main | ||
Location: ServerBeach and | Location: ServerBeach and ibiblio | ||
Servers: ns1.fedoraproject.org, | Servers: ns1.fedoraproject.org, ns2.fedorparoject.org | ||
Purpose: Provides DNS to our users | Purpose: Provides DNS to our users | ||
== Troubleshooting, Resolution and Maintenance == | == Troubleshooting, Resolution and Maintenance == | ||
=== DNS update === | === DNS update === | ||
| Line 25: | Line 23: | ||
<pre> | <pre> | ||
git clone /git/puppet | git clone /git/puppet | ||
cd | cd modules/bind/files/master | ||
vi fedoraproject.org # Don't forget to increment the serial! | vi fedoraproject.org # Don't forget to increment the serial! | ||
cd ../.. | cd ../.. | ||
git commit -m "What you did" | |||
git push | |||
</pre> | </pre> | ||
It should update within a half hour. You can test the new configs with dig: | It should update within a half hour. You can test the new configs with dig: | ||
<pre> | <pre> | ||
dig @ns1.fedoraproject.org fedoraproject.org | dig @ns1.fedoraproject.org fedoraproject.org | ||
dig @ | dig @ns2.fedorpaorject.org cvs.fedoraproject.org | ||
</pre> | </pre> | ||
Revision as of 03:27, 13 August 2009
We have two DNS server, the primary is at ns1.fedoraproject.org and is hosted at ServerBeach, from there it replicates to dns1.j2solutions.net.
Contact Information
Owner: Fedora Infrastructure Team
Contact: #fedora-admin, sysadmin-main
Location: ServerBeach and ibiblio
Servers: ns1.fedoraproject.org, ns2.fedorparoject.org
Purpose: Provides DNS to our users
Troubleshooting, Resolution and Maintenance
DNS update
DNS config files are puppet managed on puppet1. The update is standard to the puppet configs at http://fedoraproject.org/wiki/Infrastructure/Puppet/QuickStart
From puppet1:
git clone /git/puppet cd modules/bind/files/master vi fedoraproject.org # Don't forget to increment the serial! cd ../.. git commit -m "What you did" git push
It should update within a half hour. You can test the new configs with dig:
dig @ns1.fedoraproject.org fedoraproject.org dig @ns2.fedorpaorject.org cvs.fedoraproject.org
resolv.conf
In order to make the network more transparent to the admins we do a lot of search based relative names. Below is a list of what a resolv.conf should look like.
Phoenix
search fedora.phx.redhat.com vpn.fedoraproject.org fedoraproject.org
Non-Phoenix
search vpn.fedoraproject.org fedoraproject.org
The idea here is that we can, when need be, setup local domains to contact instead of having to go over the VPN directly but still have sane configs. For example if we tell the proxy server to hit "app1" and that box is in PHX, it will go directly to app1, if its not, it will go over the vpn to app1.