
Migrating from Solaris 9 Enterprise Edition on Sun Fire V440 with BIND 8.3.3
to Solaris 10 Enterprise Edition on Dell PowerEdge R900 with BIND 9.3.5-P1
4
virtualization in Solaris. Containers combine Zones with Solaris 10’s
resource management capabilities.
Solaris Containers offer a convenient and secure way to consolidate
DNS servers, and even to securely consolidate DNS servers with
other services. For example, Mark Thacker, Group Product
Manager, Security & Virtualization at Sun, notes, “You could run
two different DNS servers, one in each Container. So, you could
have an internal DNS server and an external DNS Server running in
another Container. Each utilizing process rights management to
run with a reduced set of privileges.”
http://nettalk.sun.com/bhive/t/1000/chat_details.jsp?content_id=
1307
Because of the security benefits, you may want to consider running
DNS in a container, even if you are only planning a simple
migration.
DNS is highly configurable, and implementations vary greatly from
installation to installation. In this Guide, we have chosen a simple
and clear scenario. Where there were several ways of
accomplishing the same goal, we used the simplest method. For
example, instead of using file distribution utilities such as rdist, or
adding the new server as a slave name server and then promoting
it to be a master name server, we used simple file copies from
machine to machine.
Our scenario is that of replacing the old DNS server while keeping
the server name and IP address constant. This makes the new
server implementation transparent to client machines, as DNS
server name, IP addresses, etc. will remain the same. The main
configuration file for our example, the named.conf file, uses no
deprecated clauses. This allows us to move the DNS configuration
files unchanged.
NOTE: In this Guide, we use BIND 9.3.5-P1 because this
version of BIND ships with Solaris 10 10/08. The latest
version is 9.6.0, available at www.isc.org
. However, as
we write this Guide, Sun does not provide an installation
package for it.
"A DNS server … is a
core service that
needs to be isolated
in case it is
compromised and to
prevent something
else from bringing it
down.… With con-
tainers it is possible
to run DNS safely
with minimal services
that cannot be com-
promised by access to
other applications or
the applications
themselves.”
Consolidating
Applications with
Solaris Containers
http://www.sun.com/
datacenter/consolidati
on/solaris10_whitepa
per.pdf
Comentários a estes Manuais