Re: Subversion service records? (Was: Mapping repositories to ports)

Hello!

Alec Kloss schrieb:
> I think this would achieve your goal and you wouldn't have to
> explain port numbers to people.

I don't have to explain port numbers to people. The port mapping
only occurs between firewall and SVN server(s); the users don't
have a clue that non-standard ports will be used. Even the target
IP addresses could be remapped by the firewall rules.

> Say repo2 becomes extremely large or extremely busy so you want to
> move it onto a different server with more disk or a better internet
> connection. You just change the DNS SRV record for it like so:
>
> _svn._svn.repo2.server IN SRV 10 10 3690 superserver

In my case I would just change the port redirection rule on the
firewall.

> Using SRV records like this does allow you to use split-horizon DNS
> to adjust available access mechanisms based on client IP address.
> You could have people inside your intranet use only svn protocol
> access, and people outside use only a https protocol access for
> example. I generally wouldn't recommend split-horizon to anyone,
> but it it an option.

Using SRV records doesn't mean that the servers/repositories are
protected from malicious users. This has to be done by a firewall,
so the firewall could also do the port redirections.

And there is also another problem with SRV records: the DNS server
has to support it, and the administrator must have a possibility
to set such records. For my company the DNS server is neither hosted
on my server or on my ISP's server; it is hosted on a completely
location, and I am able to create just host and MX records, nothing
else.

With best regards
Andreas Schweigstill

-- 
Dipl.-Phys. Andreas Schweigstill
Schweigstill IT | Embedded Systems
Schauenburgerstraße 116, D-24118 Kiel, Germany
Phone: (+49) 431 5606-435, Fax: (+49) 431 5606-436
Mobile: (+49) 171 6921973, Web: http://www.schweigstill.de/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org