10.6 Preferring Name Servers on Certain Networks

BIND 8's topology feature is somewhat similar to sortlist, but it only applies to the process of choosing name servers. We described how BIND chooses between a number of name servers that are authoritative for the same zone earlier in the book - by selecting the name server with the lowest roundtrip time. But we lied - a little. BIND 8 actually places remote name servers in 64 millisecond bands when comparing RTT. The first band is actually only 32 milliseconds wide (there! We did it again), from zero to 32 milliseconds. The next extends from 33 to 96 milliseconds, and so on. The bands are designed so that name servers on different continents will always be in different bands.

The idea is to favor name servers in lower bands but to treat servers in the same band as equivalent. If a name server compares two remote servers' RTTs and one is in a lower band, the name server will choose to send the query to the name server in the lower band. But if the remote servers are in the same band, the name server will check to see whether one of the remote servers is topologically closer.

Topology lets you introduce yet another element of fudge into the process of choosing a name server to query. Topology lets you favor name servers on certain networks over others. Topology takes as an argument an address match list, where the entries are networks, listed in the order in which the local name server should prefer them (highest to lowest). Therefore:

topology {
                15/8;
                172.88/16;
};

tells the local name server to prefer name servers on the network 15.0.0.0 over other name servers, and name servers on the network 172.88.0.0 over name servers on networks other than network 15.0.0.0. So if the name server has a choice between a name server on network 15.0.0.0, a name server on 172.88.0.0, and a name server on 192.168.1.0, assuming all three have RTT values in the same band, it will choose to query the name server on 15.0.0.0.

You can also negate entries in the topology address match list to penalize name servers on certain networks. The higher in the address match list the negated entry matches, the greater the penalty.