Commit e1ce9b3d authored by Bill MacAllister's avatar Bill MacAllister
Browse files

dns: Move anycast servers to the top of the nameserver list

A problem in the way that ssh/gssapi authentication works can be
worked around by moving the anycast servers first.  We had reverted
this change in the past when networking told us anycast was not
ready for primetime, so this change has been well tested.  Now that
anycast is a production service moving to it will solve an immediate
problem.
parent 514fc18f
release/004.005 (unreleased)
release/004.005 (2014-11-21)
[dns] Change the order of the nameservers and move the anycast
servers to the top of the list. (whm)
[ssh] Allow the PermitRootLogin to be set to "yes" (defaults to usual
setting of "without-password").
......
......@@ -50,14 +50,14 @@ nameserver 127.0.0.1
<% if set_first_dns_server -%>
nameserver <%= first_dns_server %>
<% end -%>
# Stanford anycast DNS servers
nameserver 171.64.1.234
nameserver 171.67.1.234
# Standard DNS servers
nameserver 171.64.7.121
nameserver 171.64.7.77
nameserver 171.64.7.99
nameserver 171.64.7.55
# Stanford anycast DNS servers
nameserver 171.64.1.234
nameserver 171.67.1.234
<% end %>
<% if set_dns_options -%>
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment