[Freeipa-users] DNS views: request for comments

[Petr Spacek]

Hello list,

we would like to get more details about DNS views and how you use them in real 
life. Also, any idea how user a interface should work is more than welcome!

(If you don't know views, read it as "differentiate answer to a DNS query on 
client's IP address basics".)


Questions are:
- For what purpose do you use views?
E.g. handling clients inside/outside of company network (e.g. hiding internal 
names); Selecting nearest server in a big network; Some other weird 'Cloud' 
scenarios etc. etc.

- How many views do you use?

- Do you share some data between views? How did you solve that? Do you use 
some user interface for that?

- Do you use DNS updates? (nsupdate/RFC 2136/RFC 3007)

Previous discussions about DNS views:
https://www.redhat.com/archives/freeipa-users/2012-April/msg00070.html
https://www.redhat.com/archives/freeipa-devel/2012-May/msg00208.html

Related tickets & bugs:
https://fedorahosted.org/freeipa/ticket/2802	
https://bugzilla.redhat.com/show_bug.cgi?id=815621
https://fedorahosted.org/freeipa/ticket/3725
https://fedorahosted.org/bind-dyndb-ldap/ticket/69


The next step will be to design LDAP schema for DNS data with views ...

I can see three basic options:

1) Resign from any data sharing, which will make the thing pretty easy :-)
In that case 'view1' will be represented by one sub-tree in LDAP, 'view2' will 
be another sub-tree etc.

2) Select one sub-tree which will be 'the base' containing all shared records. 
All other views will inherit and override data from the shared 'base'.

3) Make it as general as possible and allow multiple levels of inheritance. 
View3 inherits from View2 and it inherits from Base.
(View3 <- View2 <- Base)

It is basically generalized variant (2), but it could require different LDAP 
schema.


Please post your opinions!

-- 
Petr^2 Spacek