Knowledge Base ISC Main Website Ask a Question/Contact ISC
How do I configure multiple views to share the same recursive cache?
Author: ISC Support Reference Number: AA-00835 Views: 7768 Created: 2012-11-30 15:14 Last Updated: 2013-01-28 14:20 0 Rating/ Voters

The attach-cache option is used to configure cache-sharing between views.

attach-cache cache_name;

By default, each view has its own unique cache.  When using the attach-cache option, you can specify a name for the cache that named creates for a view.  If multiple views share the same cache name, then as the additional views are created, instead of creating a new cache for each, named links the views to the same cache.

See the Administrator Reference Manual (ARM) for more detail.

However, caches can only be shared if they have identical policies.  Here are the settings that, if inconsistent between two caches with the same name, will result in named failing to start :

  • check-names
  • zero-no-soa-ttl
  • max-cache-size
  • max-cache-ttl
  • max-ncache-ttl
  • dnssec-validation (note that this is only effective with trust anchors and/or DLV configured)
  • dnssec-accept-expired

An error will be logged and named will fail to start if attach-cache is used to configure cache-sharing between views with different cache policies.  Here is an example of this type of failure:

03-Dec-2012 12:15:47.231 views internal-only and external can't share the cache due to configuration parameter mismatch
03-Dec-2012 12:15:47.231 loading configuration: failure
03-Dec-2012 12:15:47.231 exiting (due to fatal error)


The validation of cache policy only takes place when named starts

Administrators are advised that mismatched cache policies will not be detected by named-checkconf.

Handling authoritative zones in views

For information on setting up authoritative zones in views see Understanding views in BIND 9, by example.




© 2001-2017 Internet Systems Consortium

For assistance with problems and questions for which you have not been able to find an answer in our Knowledge Base, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership.

ISC relies on the financial support of the community to fund the development of its open source software products. If you would like to support future product evolution and maintenance as well having peace of mind knowing that our team of experts are poised to provide you with individual technical assistance whenever you call upon them, then please consider our Professional Subscription Support services - details can be found on our main website.

Feedback
  • There is no feedback for this article
Quick Jump Menu