Keel-Linux/handbook
1
0
Fork 0
Code Issues 4 Pull requests 8 Projects Releases Packages Wiki Activity Actions

docs: decision notes 0044 and 0045, Keel Web in the cloud and Keel DNS #38

Open
marcos-mendez wants to merge 2 commits from docs/decisions-0044-0045-web-cloud-dns into main
pull from: docs/decisions-0044-0045-web-cloud-dns
merge into: Keel-Linux:main
Conversation 0 Commits 2 Files changed 3 +531 -1
marcos-mendez commented 2026-10-02 00:06:21 -03:00 (Migrated from github.com)
Copy link

Decision notes 0044 and 0045, decided by the maintainer on 2026-10-02 for the points recorded under "Decision" in each; the details he did not decide are under "Open questions", each with a recommendation.

  • 0044, Keel Web in the cloud. Public traffic: DNS with a health check first (low TTL, with the resolvers that ignore it stated), edge nodes second (rendezvous points with a fixed address, VRRP between edge nodes in one datacenter), VRRP between Keel Web nodes low priority, the WireGuard VIP of 0029 mesh internal only. Load balancing in front of applications stays 0042's; in front of Keel Web nodes it is DNS plus the edge. Keel Web gets a role (active and standby, or N active); its web section is the source of truth applied by each node, and certificates are shared under 0041's shared secret policy.
  • 0045, Keel DNS, PowerDNS authoritative. A new appliance on PowerDNS Authoritative 4.9.17-0+deb13u1 (trixie), LUA records with ifportup and ifurlup (verified in the trixie binary), at least two servers in different sites, RFC 2136 with TSIG or the etcd feed for nodes behind NAT, which closes 0024's open item. Public on 53/udp and 53/tcp, no Keel Web in front, and the first appliance whose failure affects the others.
  • Both amend 0020, 0024, 0028 and 0029. README index rows added.

Tracker issues and the roadmap placement (after Phase 3, before Phase 5) are on Keel-Linux/tracker.

Test plan

  • Maintainer reads both notes and answers the open questions
  • Links in the README index resolve
Decision notes 0044 and 0045, **decided by the maintainer on 2026-10-02** for the points recorded under "Decision" in each; the details he did not decide are under "Open questions", each with a recommendation. - **0044, Keel Web in the cloud.** Public traffic: DNS with a health check first (low TTL, with the resolvers that ignore it stated), edge nodes second (rendezvous points with a fixed address, VRRP between edge nodes in one datacenter), VRRP between Keel Web nodes low priority, the WireGuard VIP of 0029 mesh internal only. Load balancing in front of applications stays 0042's; in front of Keel Web nodes it is DNS plus the edge. Keel Web gets a role (active and standby, or N active); its `web` section is the source of truth applied by each node, and certificates are shared under 0041's shared secret policy. - **0045, Keel DNS, PowerDNS authoritative.** A new appliance on PowerDNS Authoritative 4.9.17-0+deb13u1 (trixie), LUA records with `ifportup` and `ifurlup` (verified in the trixie binary), at least two servers in different sites, RFC 2136 with TSIG or the etcd feed for nodes behind NAT, which closes 0024's open item. Public on 53/udp and 53/tcp, no Keel Web in front, and the first appliance whose failure affects the others. - Both amend 0020, 0024, 0028 and 0029. README index rows added. Tracker issues and the roadmap placement (after Phase 3, before Phase 5) are on Keel-Linux/tracker. Test plan - [ ] Maintainer reads both notes and answers the open questions - [ ] Links in the README index resolve
This pull request has changes conflicting with the target branch.
  • docs/decisions/README.md
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin docs/decisions-0044-0045-web-cloud-dns:docs/decisions-0044-0045-web-cloud-dns
git switch docs/decisions-0044-0045-web-cloud-dns

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff docs/decisions-0044-0045-web-cloud-dns
git switch docs/decisions-0044-0045-web-cloud-dns
git rebase main
git switch main
git merge --ff-only docs/decisions-0044-0045-web-cloud-dns
git switch docs/decisions-0044-0045-web-cloud-dns
git rebase main
git switch main
git merge --no-ff docs/decisions-0044-0045-web-cloud-dns
git switch main
git merge --squash docs/decisions-0044-0045-web-cloud-dns
git switch main
git merge --ff-only docs/decisions-0044-0045-web-cloud-dns
git switch main
git merge docs/decisions-0044-0045-web-cloud-dns
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
accessibility

Barrier affecting people with disabilities

  
bug

Something isn't working

  
documentation

Improvements or additions to documentation

  
duplicate

This issue or pull request already exists

  
enhancement

New feature or request

  
good first issue

Good for newcomers

  
help wanted

Extra attention is needed

  
invalid

This doesn't seem right

  
question

Further information is requested

  
wontfix

This will not be worked on

No labels
accessibility
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Keel-Linux/handbook!38
No description provided.