Benefits of moving Active Directory DNS to Address Manager and DNS/DHCP Server - BlueCat Address Manager - 8.3.2

Address Manager Administration Guide
prodname
BlueCat Address Manager
version_custom
8.3.2

Advantages of moving AD from a Master-Master architecture to Master-Slave used in Address Manager and DNS/DHCP Server.

There are two approaches to DNS record replication: Master-Slave and Master-Master.

Master-Slave—This is the recommended method for managing DNS. The current industry standard (outlined in RFC 1034 and 1035) states that a secondary zone (slave) replicates its contents from a primary (master) zone on a given internal network. The Master-Slave architecture works on Windows, UNIX, and other operating systems.

The following table lists the pros and cons of a Master-Slave replication system:

Table. Master—Slave Replication System
Pros Cons
  • An industry standard method for maintaining zone data.
  • The master always contains most up-to-date information.
  • A central repository for zone data.
  • It does not require other services to replicate data.
  • Master server updates are required to make changes on other servers.
  • If a slave is updated, a small delay exists before the update is propagated.
  • It requires latest version of BIND software to take advantage of update-forwarding.

Master-Master—The recommended Microsoft architecture for AD specifies that the DNS servers should reside on the DC, eliminating the need to perform zone transfers.

The following table lists the pros and cons of the Master-Master method of replication:
Table. Master—Master Replication System
Pros Cons
  • A central repository for all zone data.
  • Editing the DNS in one zone replicates to all others.
  • Saves bandwidth and processing power. by using existing LDAP replication to replicate DNS data.
  • Microsoft-only implementations.
  • Zone serial numbers can be inconsistent in SOA data.
  • Non-standard architecture.
  • Not favored in heterogeneous environments.
  • Relies on LDAP for replication.
  • LDAP replication may not be acceptable for external zone data.


Because DNS/DHCP Server uses the BIND name server software, its architectures are Master-Slave based.