When running two DC's is the recommended practice for the first DC to resolve to itself, like this: first DC /etc/resolv.conf file: search samdom.tld nameserver [DC1 ip address] nameserver 127.0.0.1 And on second DC to both DC1 and DC2, like this: search samdom.tld nameserver [DC1 ip address] nameserver [DC2 ip address] nameserver 127.0.0.1 Or is the incorrect? -- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" Links: ------ [1] http://www.donelsontrophy.com
Bob,
Take a look at the following two links.
http://retrohack.com/a-word-or-two-about-dns-islanding/
http://blogs.technet.com/b/askds/archive/2010/07/17/friday-mail-sack-saturday-edition.aspx#dnsbest
I have more than two DC's but generally I would have each one point at
the other.
On 3/11/2015 1:36 PM, Bob of Donelson Trophy wrote:>
>
> When running two DC's is the recommended practice for the first DC to
> resolve to itself, like this:
>
> first DC /etc/resolv.conf file:
>
> search samdom.tld
> nameserver [DC1 ip address]
> nameserver 127.0.0.1
>
> And on second DC to both DC1 and DC2, like this:
>
> search samdom.tld
> nameserver [DC1 ip address]
> nameserver [DC2 ip address]
> nameserver 127.0.0.1
>
> Or is the incorrect?
>
--
-James
On 11/03/15 18:01, James wrote:> Bob, > > Take a look at the following two links. > > http://retrohack.com/a-word-or-two-about-dns-islanding/ > > http://blogs.technet.com/b/askds/archive/2010/07/17/friday-mail-sack-saturday-edition.aspx#dnsbest > > I have more than two DC's but generally I would have each one point at > the other. > >I tried that, pointing each DC to the other and my DNS resolving slowed to a crawl, hung for short periods and generally became unresponsive. I just have: search <dns domain> nameserver 127.0.0.1 on each DC, and everything works ok for me, my feelings are that because each DC runs a DNS server and replicates info to the others then each DC should be able to respond. If something has gone wrong with the DNS server then probably there are others things that have gone wrong and may not respond to any DNS request. Pointing member servers & clients at both DCs is probably a good idea. Rowland