Hi,

At University of Leicester we are currently looking at options for
adding an additional DNS advertiser.

We have an existing informal arrangement with Bath who provide one of
our secondaries which continues to work well for us after many years.
But recently there has been a push from above to put something more
formal (read contractual) in place. So taking this to be inevitable
I'm looking to gain some technical benefits as well.

Ideally I'm looking for (a) something off of the JANET network (we
have a number of externally hosted web services) and (b) with
multi-master support which would allow us to update our DNSSEC signed
zones from a remotely hosted, stealth primary (well, slave on
warm-standby to become primary during a sustained loss of campus/JANET
connectivity that we are being steered to prepare for.)

ISC's SNS-PB [1] seems to fit the bill and we have been quoted ~$1000
p.a. Anycast, multi-master, high-volume...

A couple of questions if I may:

Firstly, does anybody have experience with this service (or a similar
service that they can recommend)?

Secondly, in the broader context of disaster recovery perhaps people
are prepared to describe any of their solutions (present or future) to
remotely update DNS in the presence of DNSSEC signing?


[1] http://www.isc.org/services/sns/


Many thanks,

Terry