Skip to main content

nameserver - Dns and custom name servers not updating?




I need a dns expert, cause I'm thoroughly confused right now...



We've got about 30 sites that are registered to custom name servers :



Ns1.vertigo.bm and ns2.vertigo.bm



Vertigo.bm points to name servers at site5, with the other sites supposedly being passed on with the custom name servers.



Now a lookup of vertigo.bm will give me :




DNS servers
ns2-merton.webserversystems.com [174.120.194.4]
ns1-merton.webserversystems.com [174.120.194.3]



Which in turn should pass on to the custom name servers, however doing a lookup with a domain that has these custom name servers (bprfc.bm for example) gives us this :



DNS servers
ns2.vertigo.bm [174.120.16.36]
ns1.vertigo.bm [174.120.16.35]




Those are the old ip address for the old server ... The registrar has said they've updated the name server, but I don't see any updating! Help!


Answer



DNS data is cached in servers around the world. Checking your servers for changes is likely to mislead you as to whether a change has been made or not.



Looking at your data from here shows that your changes have been made. It looks like your TTL (Time To Live) is about four hours so your changes should be visible to you as well.



When making major changes it is best to make changes in a manner that uses the old and new addresses for a transitional period. One approach would be to publish both the old and new ip addresses at least on TTL period. Then when the transition occurs DNS will have the new addresses to use. Once the transition is done the old IP addresses can be removed.



It is common to change the TTL to a low value prior to the change so that cached data will be refreshed quickly. Scaling down the TTL over a period of time can be used limit the period when most requests are handled by your listed name servers.




EDIT: You can check what various name servers have in their cache with the nslookup or host (newer Linux/Unix distributions) command. You could try google (8.8.4.4 or 8.8.8.8) or OpenDNS (208.67.220.220 or 208.67.222.222) to see what some major caches have. The command for one of the name servers listed above is:



nslookup  ns1.vertigo.bm 8.8.8.8


The timetable I use for scaling down TTL is to reduce it by half whenever the time until the change is twice the current TTL. Keep the TTL at least five or ten minutes. Add the new addresses to the active nameservers 10 to 20 minutes in advance of the change. Remove the old entries after the change has been accomplished.


Comments

Post a Comment

Popular posts from this blog

linux - iDRAC6 Virtual Media native library cannot be loaded

When attempting to mount Virtual Media on a iDRAC6 IP KVM session I get the following error: I'm using Ubuntu 9.04 and: $ javaws -version Java(TM) Web Start 1.6.0_16 $ uname -a Linux aud22419-linux 2.6.28-15-generic #51-Ubuntu SMP Mon Aug 31 13:39:06 UTC 2009 x86_64 GNU/Linux $ firefox -version Mozilla Firefox 3.0.14, Copyright (c) 1998 - 2009 mozilla.org On Windows + IE it (unsurprisingly) works. I've just gotten off the phone with the Dell tech support and I was told it is known to work on Linux + Firefox, albeit Ubuntu is not supported (by Dell, that is). Has anyone out there managed to mount virtual media in the same scenario?
Post a Comment
Read more

hp proliant - Smart Array P822 with HBA Mode?

We get an HP DL360 G8 with an Smart Array P822 controller. On that controller will come a HP StorageWorks D2700 . Does anybody know, that it is possible to run the Smart Array P822 in HBA mode? I found only information about the P410i, who can run HBA. If this is not supported, what you think about the LSI 9207-8e controller? Will this fit good in that setup? The Hardware we get is used but all original from HP. The StorageWorks has 25 x 900 GB SAS 10K disks. Because the disks are not new I would like to use only 22 for raid6, and the rest for spare (I need to see if the disk count is optimal or not for zfs). It would be nice if I'm not stick to SAS in future. As OS I would like to install debian stretch with zfs 0.71 as file system and software raid. I have see that hp has an page for debian to. I would like to use hba mode because it is recommend, that zfs know at most as possible about the disk, and I'm independent from the raid controller. For us zfs have many benefits,
Post a Comment
Read more

apache 2.2 - Server Potentially Compromised -- c99madshell

So, low and behold, a legacy site we've been hosting for a client had a version of FCKEditor that allowed someone to upload the dreaded c99madshell exploit onto our web host. I'm not a big security buff -- frankly I'm just a dev currently responsible for S/A duties due to a loss of personnel. Accordingly, I'd love any help you server-faulters could provide in assessing the damage from the exploit. To give you a bit of information: The file was uploaded into a directory within the webroot, "/_img/fck_uploads/File/". The Apache user and group are restricted such that they can't log in and don't have permissions outside of the directory from which we serve sites. All the files had 770 permissions (user rwx, group rwx, other none) -- something I wanted to fix but was told to hold off on as it wasn't "high priority" (hopefully this changes that). So it seems the hackers could've easily executed the script. Now I wasn't able
Post a Comment
Read more