In order to implement something akin to split-horizon (T95288) I need to set up a separate recursor and auth DNS server for the new designate/pdns/mysql setup. The simplest way to do this is with separate hardware due to resolv.conf not being able to specify a port number.
Eventually we'll want doubles for everything, but one is a good start. It should probably live in the labs-support vlan if there's room.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | hashar | T96670 Instances created by Nodepool cant run puppet due to missing certificate | |||
| Resolved | Andrew | T97163 Support instance creation/deletion via nova commandline | |||
| Resolved | Andrew | T97170 Switch all of labs to the pdns server, remove the use_dnsmasq flag. | |||
| Resolved | coren | T71042 Labs instances rely on unpuppetized firewall setup to connect to databases | |||
| Resolved | valhallasw | T100554 Grid engine masters down | |||
| Resolved | Krenair | T63897 Move LabsDB aliases to DNS | |||
| Resolved | Andrew | T87280 Investigate replacing our custom DNS code with Designate | |||
| Resolved | yuvipanda | T100023 Move toollabs to designate | |||
| Duplicate | None | T96641 Move tools to designate | |||
| Resolved | coren | T95288 Designate should support split horizon resolution to yield private IP of instances behind a public DNS entry | |||
| Resolved | Andrew | T99133 New server for labs dns recursor |
So PowerDNS supports multiple instances I think. Wouldn't this be easy to do on a separate IP? From a resources perspective, it doesn't need another full server at all...
Since this is now goign to be a test with a second IP, I'm pulling the hardware-requests project for now. If this goes back to needing new metal, just re-append it back on.