<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<STYLE>
BLOCKQUOTE {
MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em; MARGIN-TOP: 0px
}
OL {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
UL {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
DIV.FoxDiv20140824205846484919 {
FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; COLOR: #000000; MARGIN: 10px; LINE-HEIGHT: 1.5
}
BODY {
FONT-SIZE: 10.5pt; FONT-FAMILY: 宋体; COLOR: #000000; LINE-HEIGHT: 1.5
}
</STYLE>
<META name=GENERATOR content="MSHTML 11.00.9600.17239">
<STYLE>BLOCKQUOTE {
MARGIN-BOTTOM: 0px; MARGIN-LEFT: 2em; MARGIN-TOP: 0px
}
OL {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
UL {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
</STYLE>
<META name=GENERATOR content="MSHTML 6.00.6000.17109"></HEAD>
<BODY style="MARGIN: 10px">
<DIV>
<DIV> </DIV></DIV>
<DIV>
<DIV class=FoxDiv20140824205846484919 style="BACKGROUND-COLOR: white">
<DIV>
<DIV>
<DIV><FONT size=2 face=Verdana>Hi all,</FONT></DIV>
<DIV> </DIV>
<DIV style="TEXT-INDENT: 2em">From KNET , I notice there is a topic about
opendnssec High Availablity at <A
href="https://wiki.opendnssec.org/display/DOCS/High+availability">https://wiki.opendnssec.org/display/DOCS/High+availability</A>
</DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em">But I was a little puzzled by this page.</DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em">It mentioned about master/slave like
this:</DIV>
<DIV style="TEXT-INDENT: 2em">
<H2 id=Highavailability-Master/Slave class=p1
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(255,126,0); PADDING-BOTTOM: 0px; BORDER-BOTTOM-COLOR: rgb(102,153,204); PADDING-TOP: 0px; FONT: 20px/1.5 Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 30px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">Master/Slave</H2>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><FONT
color=#ff9900>Careful consideration should be given to which, if any, process
are run on a slave (or on each master in a Master-Master) configuration. Some
operators don't run either the enforcer or the signer on a slave instance but
merely duplicate the data between the two instances in a timely fashion. Others
run two master servers, both enforcing and signing but only publishing from an
'active' master</FONT>.</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"> </P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">I'm
wondering what will happen to the rollover of keys if we make a
master-master deployment.</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">1.Mysql
used to store keys data , and</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">2.HSM
machine employed to generate keys , and</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">3.Two
opendnssec instances running on seperate servers for the same zone</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">Will
the two opendnssec instances generate different keys for the same zone? If so ,
it seems as if it will bring troubles when the 'active' master is down
?</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px"> </P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">Can anyone
give more suggestions on the High Availablity of opendnssec ?</P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px"> </P>
<P
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(51,51,51); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; FONT: 14px/20px Arial, sans-serif; PADDING-LEFT: 0px; MARGIN: 10px 0px 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 2em; -webkit-text-stroke-width: 0px">Best
Regards!</P></DIV></DIV></DIV>
<DIV> </DIV>
<HR style="HEIGHT: 1px; WIDTH: 210px" align=left color=#b5c4df SIZE=1>
<DIV>2014-08-24 18:05:37</DIV>
<DIV>gaolei</DIV></DIV></DIV></BODY></HTML>