From kgenessy at uen.org Mon Aug 2 14:28:30 2010 From: kgenessy at uen.org (Kelly Genessy) Date: Mon, 2 Aug 2010 14:28:30 -0600 Subject: [tforum] ---DNS MIGRATION INFO---- Message-ID: <9693807D-5B9E-4EC1-9845-A5111F82E5F1@uen.org> All, Testing and migration is on track for our new DNS rollout on August 14th (Saturday 8:00AM). In my previous emails we focused towards those who are running primary DNS and allowing our new IP address to communicate with your servers. Hopefully you all have done that and are ready for us. This email we need to focus on a couple of things. ON AUGUST 11th 11:59PM we are SHUTTING DOWN our current DNS web tools for the public. All requests on Thursday 8/12 and Friday 8/13 before the cutover will need to be made through the NOC or via email. All changes will still be migrated into our new system however we want to monitor all changes the last two days of migration. DNS WIKI - We have created a DNS Wiki for you to few. https://wiki.uen.org/display/DNSDocs is the URL (We may not open this until we go live). Here we will post some walkthrough's and how to's on using the DNS system. Most of these changes will be seamless to you all however if you use the DNS Web tools it will be quite different for you and take a little bit of time to get used to. You can always use the NOC or dns at uen.org mailing list for DNS changes if you are uncomfortable making changes right away. If you have any questions about the upcoming changes please let me know. ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.uen.org/pipermail/tforum/attachments/20100802/815b6858/attachment-0001.html From kgenessy at uen.org Thu Aug 12 00:29:10 2010 From: kgenessy at uen.org (Kelly Genessy) Date: Thu, 12 Aug 2010 00:29:10 -0600 Subject: [tforum] Dnsweb tools now Offline for the public In-Reply-To: <9693807D-5B9E-4EC1-9845-A5111F82E5F1@uen.org> References: <9693807D-5B9E-4EC1-9845-A5111F82E5F1@uen.org> Message-ID: <932B4A1A-B1A8-4F9A-B238-B250EC2FC6BC@uen.org> All, Outside access to DNS Web Tools has been disabled until our new solution is implemented. We hope to have the new system up and running by Saturday night and available to you. We will send further notification on how to update your password on the new system when it is in place and working properly. If you have a dns change request please contact the UEN NOC or email dns at uen.org for changes. We will assure those changes are made and migrated into the new environment. Thanks for your cooperation on this process. Also, We hope to have the Wiki up and available within the next couple of weeks. You are always welcome to email us or contact us for assistance on the new product. We understand there will be a learning curve but in the long run this product will add so much more for your DNS options than were available before. Thanks! ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org On Aug 2, 2010, at 2:28 PM, Kelly Genessy wrote: All, Testing and migration is on track for our new DNS rollout on August 14th (Saturday 8:00AM). In my previous emails we focused towards those who are running primary DNS and allowing our new IP address to communicate with your servers. Hopefully you all have done that and are ready for us. This email we need to focus on a couple of things. ON AUGUST 11th 11:59PM we are SHUTTING DOWN our current DNS web tools for the public. All requests on Thursday 8/12 and Friday 8/13 before the cutover will need to be made through the NOC or via email. All changes will still be migrated into our new system however we want to monitor all changes the last two days of migration. DNS WIKI - We have created a DNS Wiki for you to few. https://wiki.uen.org/display/DNSDocs is the URL (We may not open this until we go live). Here we will post some walkthrough's and how to's on using the DNS system. Most of these changes will be seamless to you all however if you use the DNS Web tools it will be quite different for you and take a little bit of time to get used to. You can always use the NOC or dns at uen.org mailing list for DNS changes if you are uncomfortable making changes right away. If you have any questions about the upcoming changes please let me know. ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.uen.org/pipermail/tforum/attachments/20100812/8e6b9210/attachment.html From kgenessy at uen.org Sat Aug 14 08:57:56 2010 From: kgenessy at uen.org (Kelly Genessy) Date: Sat, 14 Aug 2010 08:57:56 -0600 Subject: [tforum] DNS MIGRATION IN PROGRESS Message-ID: All, We have begun our DNS Migration process this morning. Things are going well so far but we have a ways to go. I just want to remind you all that if we are secondary for your DNS you need to allow tcp/udp port 53 through your Firewalls/ACL's for the following addresses. NEW MASTER PRIMARY: 140.197.239.6 NEW MASTER BACKUP/STANDBY: 140.197.239.7 OLD MASTER: 205.124.246.2 If these new addresses are not allowed we will not receive your file transfers and this may very well break our DNS communication for your zones. I have emailed all DNS administrators personally with zones that are currently failing. If you have any questions regarding DNS please email or call ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.uen.org/pipermail/tforum/attachments/20100814/89725b8d/attachment.html From kgenessy at uen.org Sat Aug 14 19:39:33 2010 From: kgenessy at uen.org (Kelly Genessy) Date: Sat, 14 Aug 2010 19:39:33 -0600 Subject: [tforum] DNS MIGRATION IS COMPLETE In-Reply-To: References: Message-ID: All, UEN Has completed it's migration process with success, however there are some minor hiccups. Please read carefully otherwise your DNS could possibly break if you do not. ISSUE #1 - If UEN Manages your DNS but you have a secondary/cache/slave server READ ISSUE #1 Our Serial numbers on our zones have started over. This means if you have a secondary/cache server and we have allowed you to transfer zones off of our DNS servers. THIS AFFECTS YOU!!! You must flush your cache and restart your DNS services. If you do not do this your DNS will break one day. If our serial is lower than yours then the DNS will never update and eventually expire on your box. ISSUE #2 - If YOU manage your own DNS but UEN is slave/secondary to you READ ISSUE#2 We had roughly 13 DNS servers fail in attempting to get zones on our new system. The majority of failures were REFUSALS. We have created a temporary work around to get these issues resolved however you need to act extremely fast in fixing this. All of the following entities are working great with our old system but not our new system. We will be emailing/calling and trying everything we can to assist the following entities in fixing the issues. If your name is on this list please contact us asap if we don't call you first. CANYONS SD CUES NEBO PARK CITY SD SAN JUAN SD SALT LAKE COUNTY LIB SALT LAKE SD SLC LIBRARY SLCC USDB USOE WASHINGTON COUNTY LIB WEBER SD **** Please assure you have opened tcp/udp port 53 for the following ip addresses. 140.197.239.6, 140.197.239.7 and 205.124.246.2 **** ALSO - Make sure these ip addresses are in your allow-transfer options within your DNS config. I am assuming this is most likely the cause of the refusals. If you feel like you have resolved the issues we will need to schedule time to cut your DNS over to the new system. Most likely at night to avoid much downtime. ISSUE#3 - If UEN Hosts your DNS and you log in to manage your DNS entries read ISSUE#3 First things First. PASSWORDS! We were able to migrate usernames but decided to NOT migrate passwords. We didn't feel good about cracking your passwords and moving them to the new system. You will have to email or call myself, Shawn Lyons (slyons at uen.org) or dns at uen.org to receive your new password. We can also assist you and walk you through how to change the password. User Interface - There is definitely a learning curve in the new UI. Some of the searching and scheduling can be bothersome to track down and understand. We have created some Global Smart Folders for everyone's account to assist you in getting started. We hope to release the Wiki soon and help you with guidance whenever you wish. We are also willing to come onsite if need be and train those who are interested. Due to time we may need to coordinate at a region level for this depending on interest. The new DNS site is found at the following URL's https://dns.uen.net - (If you use http it will redirect to https) https://dns.uen.org - (If you use http it will redirect to https) SOME NEW FEATURES - ipv6 Names! - Schedule a name change! - DNSSEC - Relational Database - Ex. You can change a host with 100 cnames and they all convert to the new host! - Recoverable Recycle bin - Make an oopsie? No worries! - You can add subzones without contacting UEN (for forward zones, for reverse we can work this out with you if you send us all of your address space you may potentially want) - INSTANT CHANGES!!! - If you add a host it will resolve on our Anycast servers within seconds. None of this 5 to 9 minute crap :) LASTLY Sorry I know this is a long email and I don't mean to bore you all but I have to thank the team that has put countless hours into this project. Although we utilized a Vendor's product we have created our own backend to enhance the communication for our Anycast servers throughout the state. The core team consists of Bryan Peterson, Shawn Lyons, Dave Ianucci, Andy Cravens and myself. I want to thank Troy Jessup and Jim Stewart also for getting us starting and making sure we are on the right path. The team has done a lot of work and put many things aside to complete this project. ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.uen.org/pipermail/tforum/attachments/20100814/4db1cb8f/attachment.html From kgenessy at uen.org Tue Aug 17 11:46:55 2010 From: kgenessy at uen.org (Kelly Genessy) Date: Tue, 17 Aug 2010 11:46:55 -0600 Subject: [tforum] More DNS Stuff Message-ID: <5C7DC4D7-AB7D-40F3-BE5E-40C480C23680@uen.org> All, There has been a little bit of confusion in regards to our DNS Changes that I hope to clarify. We have NOT changed our Primary and Secondary DNS servers that you put into your workstation machines. NS and NS2 are still the same. ns.uen.net = 205.124.254.2 ns2.uen.net = 205.124.253.1 We have seen an abnormal amount of DNS queries for the other ip's that I have mentioned in previous emails. I won't mention the ip's here to avoid more confusion. No one should be pointing to these servers for name resolution. Please avoid doing this to help us keep our logs fairly clean. I may contact you if the logs hits continue. The new ip's that we have been emailing about are our DNS Tools and Hidden Master. Those only should matter to you if you manager your own Primary DNS server. If you manage a Cache or Secondary server and get files from UEN you will set get those from ns.uen.net and that should not change for you. Just make sure you flush your cache and restart your services to get new files. I know i've sent some crazy long emails so I apologize about any confusion this has caused. Thanks! ============ Kelly Genessy UEN - Sr. NOC Engineer 801-585-9029 (Desk) 801-209-7459 (Cell) kgenessy at uen.org -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.uen.org/pipermail/tforum/attachments/20100817/bf64d57a/attachment-0001.html