<div class="gmail_quote">On Mon, Sep 17, 2012 at 3:07 PM, Sean Cody <span dir="ltr"><<a href="mailto:sean@tinfoilhat.ca" target="_blank">sean@tinfoilhat.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I agree this is a much better solution.<br>
It also allows a buy of flexibility for dealing with the same domain in different security domains (ie. serverA is 10/X inside and 4.5.6.7 outside). Keepin naming consistent across zones AND insuring internal resolvers for the same domain include external views as well is about 100 times easier to do with bind views.</blockquote>
<div><br></div><div>Technically yes it's a sexier solution, but I can not recall a time where I've let a machine have the same name with different IP addresses and ended up not regretting it. Some time down the line we'd find some device or third party that used their own resolver but had a VPN to us, or a DMZ that was just a bit more special with NAT rules than the others, and then we were fighting between various groups as to who had to solve it with which hack. This gets even more fun when only one of the groups can explain what's going on.</div>
<div><br></div><div>BIND views fail my "3am test". After being woken up at 3am I don't want to be thinking about where I have to query from in order to get the "right" answer. You've put yourself in a situation where two people can get different answers for the same question. </div>
<div><br></div><div>As long as you don't take Gilbert's suggestion any further it's good, maybe even clever. But then again, it's no different than Gilles', just more indirect.</div><div><br></div><div>
Please, for your own sanity, if you want the same machine to be visible at multiple addresses depending on the context, use different zones. Your network guys, sysadmins, and developers can all agree that serverx.example.local is different than <a href="http://serverx.example.com">serverx.example.com</a>.</div>
<div><br></div><div>Sean</div></div>