From Newsgroup: comp.protocols.dns.bind
--_000_44d00cc0366c4c7fa9342946d5fedd1fmailrrciccom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
We are in the process of moving from one IPAM vendor to another.
All of our zones are DNSSEC signed and the TTL's have been lowered to 300 s= econds.
At a high level, the playbook is to update the registrar with names/IP addr= esses of the new servers and update the DSKEY. Depending on the time of th=
e day that the cutover actually happens at we know the process to request o=
f the registrar an out of band data push so the new servers will be seen by=
the open Internet.
A suggestion have been put forth that we should unsign our zones prior to m= igration but I am skeptical of the benefits of doing so.
Are we missing something obvious?
John
--_000_44d00cc0366c4c7fa9342946d5fedd1fmailrrciccom_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"
http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">We are in the process of moving from one IPAM vendor=
to another.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">All of our zones are DNSSEC signed and the TTL’=
;s have been lowered to 300 seconds.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">At a high level, the playbook is to update the regis= trar with names/IP addresses of the new servers and update the DSKEY. =
Depending on the time of the day that the cutover actually happens at we k= now the process to request of the registrar
an out of band data push so the new servers will be seen by the open Inter= net.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">A suggestion have been put forth that we should unsi=
gn our zones prior to migration but I am skeptical of the benefits of doing=
so.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">Are we missing something obvious?<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"MsoNormal">John<o:p></o:p></p>
</div>
</body>
</html>
--_000_44d00cc0366c4c7fa9342946d5fedd1fmailrrciccom_--
--- Synchronet 3.18a-Linux NewsLink 1.113