I am currently thinking about the following scenario, DNS-servers in
Forest Root (domainA.com)
-- Domain Tree B (domainB.org)
-- Domain Tree C (domainC.de
Every DNS server is a DC btw., all DCs are linked via high-speed networks (no site links / WANs)
So I have three different DNS forward lookup zones, with one or two DNS servers handling them, which I could design as follows:
All forward lookup zones are replicated throughout the forest. Every DNS server has the zones via the ForestDNSZone. I like this one, because the replication of DNS is entirely handled by Active Directory. Also - every DNS server can fail, and I will still
retain all the data. Dynamic registration may occur on every DNS as every zone is writable
+ Replication via AD
+ Very resilient
- DNS-zones are writable from every DNS-server and for all the domain admins.
Each DNS server has its own zone, and two secondary zones containing the zones of the other forward lookup zones. Secondary zones are just used for load balancing DNS and are not writeable.
+ DNS notify (only updating the zones via push if necessary)
+ Read-only zones on the other DNS servers
- No AD replication
Solution 3 - stub zones:
Every domain gets stub zones referring to the other SOAs. As I understood - every request is handled then by the DNS responsible. The list will always continue only authoritative DNS servers.
+ Error resilient (failing DNS is automatically removed)
+ Replication via AD
+ Read protected
- Lots of requests to other DNS-servers
Solution 4 - conditional forwarders:
DNS is forwarded to the specific DNS servers based on their lookup zone. Similar like the stub zone, only worse, as a failing DNS server has to be manually removed from the configuration.
-/+ Nothing I could think about :)
Maybe someone wants to share his / her ideas :) (or correct me if I misunderstood anything)
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.