Re: can dns take 1 ip and use cname to trans?

s_m_b wrote:

"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in
news:uy8tmegRHHA.1208@xxxxxxxxxxxxxxxxxxxx:

Well thanks for wonderfully sarcastic post.
I myself am responding to other people's lack of planning, not my lack of planning.


"s_m_b" <smb20002ns@xxxxxxxxxxx> wrote in message news:Xns98CA7AEA3CB8Dsmb2000nshotrmailcom@xxxxxxxxxxxxxxxx

Problem we have:
We are about to switch web servers and those in power want it to be
'seamless'. For various reasons a short ttl was rejected.

That was likely an ignorant (meaning without the knowledge to
understand the problem) 'decision'.

What possible reason would this be rejected other than failure to plan
which YOU seem to be doing?


Mainly our ISP cannot guarantee an immediate response for making DNS updates. They expect notice of several hours.



Because we run the two servers in our dmz, the redirect from server
(old) to server (new) has to use the external ip not the internal
one.

Just remove the old one, and keep them both online until the (LONG)
TTL expires and no one is still using the old one.


were it that simple. The new one has to be proved (please don't ask) before we remove the fallback (the old server)


Whilst the external one works for the internet, we're blind from the
network (again various reasons) whilst its on, so I need to fid a way
to get the redirect ip picked up by our internal dns and somehow
translated to
its dmz one.

The way you are TRYING to do it has nothing to do with DNS -- you just
put a redirect in ALL the web pages (someone may be bookmarked deep
inside) of the old web server.


Again, were it that simple....



This is not the best way to do it, because playing with DNS records
and reducing the TTL is EASY.


The obvious solution, I thought, was a cname 'www2' for the internal
ip that could then be used by the A record for the external address.

No, CNAME give you two names ro ONE Server IP address.


Seems not, though. Is there another way around this one?
in simple terms we need to do

Yes, do it right -- they way you knew how to do it.

You may have to EXPLAIN this carefully to whoever it making decisions
but that is the best way to get "around this one".


'new server external address' -> 'new server internal address'
where the external one is used by IIS redirect, and networked PCs
cannot get to this address.




Hey s_m_b, I and many others here have learned like 'everything' from these guys [Herb, Kevin, Jorge etc - thanks], never any malice.

If I understand correctly, you [plural] are not in control of your dns i.e. your ISP is the dns admin? When you say that the ISP needs several hours notice, is that for one of their tech guys to physically alter the dns or is that period of notice due to some other reason?

The optimum situation is for you/your tech to have admin access to both the web and dns servers. Planning ahead would have the new web server online in the dmz and tested from inside/outside. As Herb says, the dns changes are very quick and easy to do, provided it's in-house and not via a 3rd party.
.

Relevant Pages

  • Re: Multi Site Hosting
    ... make out that wont be the part which facilitates having a web server most ... My prior understanding was by having DNS records locally for the respective ... I would have assumed you needed SBS for its DNS? ... >>> put it on another machine running windows web server 2003 and direct the ...
    (microsoft.public.windows.server.sbs)
  • Re: A Big Mess
    ... issue or a little of both so I am going to cross post to both discussion ... * I have set up a new web server behind a firewall. ... Web server also acts as DNS server ... Internet correctly. ...
    (microsoft.public.windows.server.dns)
  • Re: Web Edition come with DNS services?
    ... However, if you're talking about an internet facing web server, you need ... some sort of DNS service too. ... intended application will run fine on 1GB-2GB of RAM, ...
    (microsoft.public.windows.server.general)
  • Re: is it possible to set up a web server on a computer in a local area network?
    ... >>much about the DNS or DMZ. ... lets you set up "port forwarding" or "services" (depending on the maker. ... > If your Web server should be visible from the internet you should do: ...
    (Fedora)
  • RE: Doain Naming
    ... will cause any security risk if the private namespace is named the same as ... When planning your DNS and Active Directory namespace, ... Microsoft Online Support ...
    (microsoft.public.windows.server.networking)