synchronize DNS servers over the VPN tunnel

['chris']

Hi

We are the HQ in our country and should synchronize
our 2 DNS Server with DNS Servers in the main office in USA
over the VPN tunnel.
USA main office is responsible for the domain xxx.net
and their DNS Servers running on Wondows.
Our domian is ch.xxx.net.

I would like to setup 2 DNS Slave Server at our site.
I'll setup there a master zone for our domain ch.xxx.net,
slave zone for the domain xxx.net
and allow the transfer from the Master DNS SERVER in USA ?
Is it a correct way ?
Could I setup Master Zone on the Slave Server ?

I have at the moment 2 internal DNS Servers running on Linux:
one Master for the domain ch.xxx.net
and one Slave.
Our DNS Servers are synchronized.
Now I think, the synchronization cannot work, I think,
because of our Master.

kind regards
chris

[Steven E. Protter]

Chris,

There are alot of ways to get this job done.

Your way seems feasible.

You could set up a series of Master servers in both places and use secure shell to exchange the DNS database records on a regular basis.

Because you are using a VPN, you have good security, but will lose a lot of band width encrpting the data.

You may find that a VPN just to exchange DNS data that doesn't change that often is overengineering.

SEP

['chris']

thanks,

you are completely right.
It doesn't need to setup slaves,
one master and one slave is OK.

I've created secondary zones and it works excellent.

I should give you more points for this answer.
Sorry, about that.

Have an other question.
What happens if the vpn tunnel goes down ?
I mean for one or two days.
Which TTL value should be set, because of the vpn connection ?
But anyway, I have only slaves zones and I get TTL values from master.
I think, the administrator of the master DNS server should carry about that,
or I'm wrong ?

greetings
chris