LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise
User Name
Password
Linux - Enterprise This forum is for all items relating to using Linux in the Enterprise.

Notices


Reply
  Search this Thread
Old 11-01-2016, 04:55 AM   #1
ilesterg
Member
 
Registered: Jul 2012
Location: München
Distribution: Debian, CentOS/RHEL
Posts: 587

Rep: Reputation: 72
DNS resolver configuration in the enterprise


Hi!

This question was triggered by an irritating client who worked on a project to set up some new DNS servers without considering the status quo of their infrastructure - clients machines (i.e. Linux, Solaris, and other UNIX servers) have to be manually reconfigured to point to DNS servers. And now he expects us to manually update all those machines' DNS resolver entries (/etc/resolv.conf) to point to the new DNS servers!

Anyway, the question is, what "configuration management" tool/suite are you using in your infrastructure? I think I'll target this question to admins who handle 2,000+ server instances at the least. Is DHCP feasible? I always have the impression that DHCP is used for desktops only. Puppet? I often see it in job postings as a required skill. Unfortunately I did not see such category in LQ's 2015 Members Choice Awards.

TIA.
 
Old 11-01-2016, 05:20 AM   #2
wpeckham
LQ Guru
 
Registered: Apr 2010
Location: Continental USA
Distribution: Debian, Ubuntu, RedHat, DSL, Puppy, CentOS, Knoppix, Mint-DE, Sparky, VSIDO, tinycore, Q4OS,Manjaro
Posts: 5,627

Rep: Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695
I recently faced a similar project when our VP decided DNS (which had only ever caused a problem when he forced a major change in DNS server) be first migrated, then outsourced. We made it work. I use mpssh and the command-line utilities, but I have less than 50 main machines to manage and this works for me. We have well over 200 nodes, but many of them are virtual machines and can be managed from the host, making this a reasonable solution.

I would advise looking into puppet. I would be using it here if we had to manage all 200+ nodes directly. I would also consider that servers using NetworkManager may require more than simply changing the etc/resolv.conf file. In most machines now that file is 'dynamically' built on boot from lines in other files (/etc/sysconfig/network-scripts/ifcfg-* for example) on network startup.
There is huge advantage to standardizing your installation and configuration standard to the extent possible, and eliminating complicating factors. There is some value in RHEL4, 5, and 6 to removing NM and managing the networking using older standards, but that may not be a supportable plan going into RHEL7 and later: I am still playing with that in RHEL7.

I would not use DHCP for servers. Certainly one could make that work, but it would not be an improvement and would become one more single point of failure that could take down your entire server farm. DHCP is elegant for clients (Better if you have an HA solution for the DHCP server), but not for servers.

Finally, your thread title is a little less than descriptive. You are not asking about help with the DNS change directly, rather with multi-server management. You may get fewer useful replies due to not mentioning the real point of your posting in the title. A thought for next time, perhaps?

Best of luck...
 
Old 11-08-2016, 11:09 PM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,359

Rep: Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751Reputation: 2751
For the current client's change (assuming you need it done pdq), then yes, use some sort of ssh multiplexing (we use dsh, but there are many others ).
For future projects, try Puppet (we use it), but there are others eg Chef, Ansible etc.
 
Old 11-13-2016, 02:05 AM   #4
ilesterg
Member
 
Registered: Jul 2012
Location: München
Distribution: Debian, CentOS/RHEL
Posts: 587

Original Poster
Rep: Reputation: 72
I read your responses too late and sadly I can no longer edit the thread title.

I will digest your explanations and will do some more readings. In any case, I won't be able to change the status quo because that might not be feasible to the client but maybe I can give inputs to future deployments!

Have a nice day!
 
  


Reply

Tags
configuration management, dhcp, dns, puppet



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Open recursive DNS Resolver fedora_user Linux - Newbie 3 05-07-2009 04:53 AM
i have a question over resolver and DNS jonhanna Linux - Newbie 6 01-26-2009 06:14 AM
strange thing with dns resolver Barq Linux - Networking 12 12-14-2007 09:11 PM
DNS Resolver Cache shipon_97 Linux - Newbie 4 04-25-2006 09:06 AM
dns client resolver Fraudulent SUSE / openSUSE 2 05-17-2005 10:12 AM

LinuxQuestions.org > Forums > Enterprise Linux Forums > Linux - Enterprise

All times are GMT -5. The time now is 11:00 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration