From owner-freebsd-net@FreeBSD.ORG Mon Aug 28 19:39:31 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5CCFA16A4F1; Mon, 28 Aug 2006 19:39:31 +0000 (UTC) (envelope-from prvs=julian=388a75976@elischer.org) Received: from a50.ironport.com (a50.ironport.com [63.251.108.112]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9339243F15; Mon, 28 Aug 2006 19:33:27 +0000 (GMT) (envelope-from prvs=julian=388a75976@elischer.org) Received: from unknown (HELO [10.251.18.229]) ([10.251.18.229]) by a50.ironport.com with ESMTP; 28 Aug 2006 12:33:14 -0700 Message-ID: <44F344FA.1000408@elischer.org> Date: Mon, 28 Aug 2006 12:33:14 -0700 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.13) Gecko/20060414 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Doug Barton References: <44EF6E18.6090905@elischer.org> <44F3429F.6050204@FreeBSD.org> In-Reply-To: <44F3429F.6050204@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: FreeBSD Net Subject: Re: possible patch for implementing split DNS X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Aug 2006 19:39:31 -0000 Doug Barton wrote: >Julian Elischer wrote: > > >>I need some processes to look elsewhere for DNS information from where >>the rest of the system looks.. This patch seems to me a simple solution. >>We over-ride where the resolver looks for resolv.conf using an >>environment variable. This would allow me to reset this to an application >>specific config file that specifies a different server. >> >>Anyone got better ways fo doing this? >> >> > >Run the special processes in a jail with its own resolv.conf? My gut >reaction to your suggestion is negative, but I'm having a hard time >articulating a solid reason why. > > I need a couple of processes to go to different nameservers for the same names.. for example running 2 proxy servers, one taking requests from the inside and one from the outside. I want them to see two different universes so makign them source different resolv.conf allows me to give them different default domains and query different servers. as well as use different timeouts. I can not run them in different jails. they still need to listen on overlapping addresses for different ports etc. ALmost all other services (e.g. inetd,natd,sshd, etc.etc.) allow you to specify a different config file so that you can supply different services to theinside and outside but it all falls appart if they still are forced to use the same DNS server and can not provide a differentiated service for that reason. >Perhaps if you described your problem in more detail, it would be easier to >work around it, but I can't help thinking that there are better ways to >solve this problem. > >Doug > > >