Avoid single point-of-failure for our GeoIP domain (!553) · Merge requests · Arch Linux / infrastructure

Merged Kristian Klausen requested to merge klausenbusk/infrastructure:geomirror-ha into master 2 years ago

Apr 15, 2022

geomirror: Add missing "open firewall hole" task · 93c8a172
Kristian Klausen authored 2 years ago
```
Fixes: 9f65f99c ("Add GeoIP domain for our sponsored mirros")
```
Verified

93c8a172

Avoid single point-of-failure for our GeoIP domain · aa359082

We don't want mirror.pkgbuild.com's DNS server to be a
single-point-of-failure, so this commit adds multiple authoritative DNS
servers for the zone. The extra DNS servers are run on the geomirror
servers.

The _acme-challenge zone, used for obtaining certificates, is run solely
on mirror.pkgbuild.com's DNS server, to avoid syncing DNS records
between the servers (KISS).

Verified

aa359082

Admin message

Avoid single point-of-failure for our GeoIP domain

Merge request reports

Activity