Decent DNS, DHCP and HTTP server on an ISR router
Readers of my blog have probably noticed that I’m occasionally documenting the shortcomings of DNS and DHCP servers built into Cisco IOS (I will not even mention the HTTP server, this one gets constantly degraded). On the other hand, although you could centralize all these services, the centralization makes the branch offices completely dependent on the availability of WAN uplinks; without a working uplink, a branch office stops completely.
When Cisco introduced AXP (Linux blade for the ISR routers), my first idea was: “now, that’s a platform on which you could implement proper DNS and HTTP server”. Not surprisingly, I was not the only one with the “brilliant” idea: Infoblox has partnered with Cisco to offer the set of IP servers one might need in a branch office on the AXP.
The only problem bugging AXP is its price: the low-end model costs $3500 (list price, without the Infoblox software). Cisco and Infoblox have flashy whitepapers “documenting” huge TCO savings, but both of them failed to share with us the input parameters, assumptions and calculations. All that’s left is a small graph showing the desired results. I’m not saying AXP is not more cost-effective than the alternative; I’m just not easily persuaded by nice-looking colorful horizontal bands. What’s your perspective? Would you replace branch servers with AXP?
Looks like the linksys WRT54G tons of software hacks "do whatever you want" evolution.
Pretty interesting and nice idea to dig into softwares and rely on partners when Cisco cannot run a BU for a specific niche needed by customers which is missing from the portfolio (the first thing I think is vulnerability assessment and security audit as qualys products but i'm sure you think about other usage based on your experience).
Anyway, like any other cisco products, the 3k$ step is still there. Looks like it can't be bypassed :)
Globally, I think AXP very positive and more and more collaborative. The effective human network is approaching!
However, I would consider virtuilization as a strong competitor for APX. I believe Microsoft offers some advantageous licensing terms for server 2008 and Hyper-V that would allow all of the applications to run on a single physical server, again keeping costs down.
I like the direction Cisco has taken with the AXP module. HP Procurve has released a similar product with their Procurve ONE module. The module allows other applications to run on the switch. The first applications offered is a BSD based firewall from Vantronix. I can see the ONE applications growing quickly to include other services.
With regards to dns/http, why would you need to get this per branch if there are already a few at the HQ? For DHCP server, there might be some interest to make config a bit more granular.
Based on the price, and in context of DNS/HTTP server, you can either go for ESXi and virtualize for non-critical/internal DNS/HTTP server or just embedded hardware running linux for a lot cheaper than 3k$. Also good to notice, I have not seen anything about resilience of such a solution...
I want to get rid of an old dying Auth DNS that I keep on an ancient server and I was thinking of moving it on the router.
I want to get rid of an old dying Auth DNS that I keep on an ancient server and I was thinking of moving it on the router.