GSS Role in a single GSS setup

Unanswered Question
Aug 13th, 2008
User Badges:

One of my client has the following setup.

They have a webserver say with a public ip say at their HQ.

The client owns the primary dns server for and is located at HQ and secondary DNS for is the ISP DNS Server.

Whenever there is change in the DNS entries for, they modify their DNS server which updates the ISP DNS server which in turn propagates the changes to internet.

This setup is working perfectly fine without any issues.

Now, the client is setting up a DRC (disaster recovery center) located few kms from HQ and connectedd via MPLS. The DRC has its own leased line internet connectivity from the same ISP.

The public ip address of the server at DRC is say

Now the Client has bought a GSS-4492R (rather sold by our PSE & Cisco SE). As per design from CISCO SE, its to be installed at HQ and it will redirect the traffic for to incase at HQ becomes unavailable due to any reason (provided only server is down and other network infrastructure is running)

I am wondering how GSS will perform the above functionality without disturbing the existing DNS setup. The client doesnt want to disturb their DNS Setup.

Please advise me about the role this GSS can play & add value in the above scenario.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Syed Iftekhar Ahmed Wed, 08/13/2008 - 01:42
User Badges:
  • Blue, 1500 points or more

GSS is designed to be integrated into an existing traditional BIND-based DNS system.

They will have to delegate the fully qualified domain name (e.g. to the GSS and make these GSSs authoritative for these domains.

For example on their bind server they need IN NS IN NS <-- NS record for via GSS1 IN NS <-- NS record for via GSS2

; IN A x.x.x.x IN A a.b.c.d <-- A record for GSS1 IN A p.q.r.s <-- A record for GSS2

Following link will give you an idea of the DNS flow with GSS in place.

GSS can also be used as a full fledge DNS (with CNR Licences).If you have CNR enabled on GSS then optionally the existing DNS servers can also be replaced by GSSs.


Syed Iftekhar Ahmed

abu_bucker Wed, 08/13/2008 - 02:18
User Badges:

Thanks for explanation. It makes things pretty clear for me.

As per my uderstanding, the GSS practically adds no value in the existing client scenario.

The only role it can play is that of an authoritative DNS server for and for this the client has to replace their existing DNS server with GSS.

Please correct me if my understanding is incorrect.


Abu Bucker

andrew.burns Wed, 08/13/2008 - 08:03
User Badges:
  • Gold, 750 points or more


To accomplish what you want then yes, you do have to make the GSS authoritative for but this is the only action needed - you don't need to replace your existing DNS server.



Syed Iftekhar Ahmed Wed, 08/13/2008 - 08:15
User Badges:
  • Blue, 1500 points or more

GSS definitely adds value. Unlike Simple DNS services it constantly probe the Servers/Local Load balancers and direct the client to most healthy and least loaded resource.

Simple DNS server has no way to find out if the resource is alive/healthy/loaded.

If they make GSS authoritative for then they are not replacing their DNS Server. They are simply delegating one DNS record to the GSS.

Client's DNS Servers will still contact their primay dns server first and then the primary DNS server will ask Client's DNS server to contact GSS for that particular record ( the other DNS records that are not delegated to GSS will still be served by their DNS Server.

Syed Iftekhar Ahmed

sateeshk10 Wed, 08/20/2008 - 07:24
User Badges:

I am not clear above msg...

I am loking same to configure in DNS server for GSS stuff..

For both of this i need DNS config in bind..

pls help me out..



Syed Iftekhar Ahmed Wed, 08/20/2008 - 09:39
User Badges:
  • Blue, 1500 points or more

If you are not using GSS as primary DNS server for and just want to delegate then

On your primary DNS server (authoritative for delegate the fully qualified domain name to the GSS and make these GSSs authoritative for this domain.

Following changes will be needed on the primary dns server IN NS <-- NS record for via GSS IN A a.b.c.d <-- A record for GSS



This Discussion