Dns Prob

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

JMS - 21 Mar 2006 20:36 GMT

Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the DNS is
AD Integrated and replicates two all Dns Servers in the same domain, both
Domain controllers are GCs. This Site have a Tree Root Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS is AD
Integrated and replicates two all Dns Servers in the same domain, This site
has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i have
especified the ip addresses of the two domain controllers in each ipsubnet.
When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down and i
get time out error, it takes some time until it start to ping the second
domain that is available.

Is this the normal behavior?

Thks-Regards.

Signature

Systems Administrator
MCSA + Exchange

Reply to this Message

Herb Martin - 21 Mar 2006 22:33 GMT

[phone number on web site]

> Hello everyone
>
[quoted text clipped - 13 lines]
> especified the ip addresses of the two domain controllers in each
> ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.

> When one domain controller goes down, if I try to ping the domain01, it
> takes some time until it figure out that the domain controller is down and
> i get time out error, it takes some time until it start to ping the second
> domain that is available.
>
> Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.

Signature

Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com

> Thks-Regards.

Reply to this Message

JMS - 21 Mar 2006 22:46 GMT

Not really, in fact the DNS zones have many Information, so Contional
Forwarding would be faster.

Signature

Systems Administrator
MCSA + Exchange

> [phone number on web site]
>
[quoted text clipped - 33 lines]
>
>> Thks-Regards.

Reply to this Message

Herb Martin - 22 Mar 2006 00:30 GMT

> Not really, in fact the DNS zones have many Information, so Contional
> Forwarding would be faster.

It's unlikely (almost impossible actually) that Conditional Forwarding
would EVER be faster than just HOLDING a COPY of the zone.

Now, Conditional Forwarding might conceivably be better for
your network since it might reduce the number of records transferred.

Even then this would need to be a large zone, and likely a few
thousand records does NOT count as large in most real world
situations.

Remember that even a large zone is seldom going to change
MOST records unless it is all laptops with DHCP assigned
addresses, and even then how much data is really in an update
done through incremental, compressed AD replication?

Signature

Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>> [phone number on web site]
>>
[quoted text clipped - 33 lines]
>>
>>> Thks-Regards.

Reply to this Message

JMS - 22 Mar 2006 01:10 GMT

I am not it try to subjugate your knowledge, but I have 700 dhcp users per
site that uses a 128kbps Wan Link, and they still use some apps over the
link, and they keep coming and going everytime, so my DHCP Lease has a very
short period time duration because i have a limited number of IPs to Attrib,
the users for dns purposes only use local domains, rarely they need to use
remote dns, and I have a Gc per Site, so Bandwith is very important.

Signature

Systems Administrator
MCSA + Exchange

>> Not really, in fact the DNS zones have many Information, so Contional
>> Forwarding would be faster.
[quoted text clipped - 52 lines]
>>>
>>>> Thks-Regards.

Reply to this Message

Herb Martin - 22 Mar 2006 17:20 GMT

>I am not it try to subjugate your knowledge, but I have 700 dhcp users per
>site that uses a 128kbps Wan Link, and they still use some apps over the
>link, and they keep coming and going everytime, so my DHCP Lease has a very
>short period time duration because i have a limited number of IPs to
>Attrib, the users for dns purposes only use local domains, rarely they need
>to use remote dns, and I have a Gc per Site, so Bandwith is very important.

Bandwidth (which I mentioned might be an issue) is different
from speed (which you said in the earlier message.) We
actually agree now.

If you are using private addressing there is likely little reason
for short lease periods however. (You aren't using class-C
size subnets for 750 possible clients just because you think this
is required, are you? Just make a bigger block of addresses,
e.g., 1000+.)

There is nothing wrong with Conditional Forwarding (but it
isn't 'faster' than holding the zone.)

Signature

Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>>> Not really, in fact the DNS zones have many Information, so Contional
>>> Forwarding would be faster.
[quoted text clipped - 52 lines]
>>>>
>>>>> Thks-Regards.

Reply to this Message

Ace Fekay [MVP] - 25 Mar 2006 05:50 GMT

> Hello everyone
>
[quoted text clipped - 20 lines]
>
> Thks-Regards.

I would just setup each tree's zone as AD Integrated Forest Wide so the zone
will be available on EVERY DC in any domain or tree in the forest. Just set
it and you will see the zone eventually appear by itself on the other DCs
(no need to create it on the other DCs, it will appear automatically).

And no, conditional forwarding, as Herb mentioned, is NOT faster than
hosting the zone locally, matter of fact during issues such as what you've
experienced, which can be attributed to the fact the bandwidth is so slow,
it may cause time-out issues.

Curious, are there any errors in the event viewer concerning AD replication
traffic?

Signature

Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy. - [Me]

Reply to this Message