The DDI Gatekeeper

We’ve all run into this person before. I’m talking about the “BIND guy” a.k.a the only guy in the entire enterprise who truly knows why DNS or DHCP are setup as they are.

We’ve all run into this person before. I’m talking about the “BIND guy” a.k.a the only guy in the entire enterprise who truly knows why DNS or DHCP are setup as they are. You know, the one who answers with, “don’t worry, I’ve got this,” when asked a complicated question.

The gatekeeper is the type of employee who has their own secret tools to track, troubleshoot and diagnose their DDI environment. And like it or not, the gatekeeper is often viewed as vital to the operation of an enterprise.

Typically, the gatekeeper is the one who implemented the architecture, or was the lucky individual who didn’t want ownership of DDI but now holds onto it tighter than a baby does their bottle.

Here’s the problem: gatekeepers are a detriment to the modern enterprise.

What sort of challenges do they pose? Let’s take a look.

1. A single point of failure. If the gatekeeper becomes unavailable (sickness, extended leave, etc.), then core projects will get held up. This costs the business money.

2. They’re a risk to your business. Gatekeepers will have all the tribal knowledge and they’ll know why quirky and intricate configurations were made. They may have planted time bombs in various systems. Remember: we’re dealing with core infrastructure here, mistakes can have corporate-wide impact.

3. They can be a PITA, or they view themselves as “the ultimate” and employees may not want to work with them unless required. Here’s an example: I need some architecture changes done and rather than ask the expert on the best way about doing so, I’m going to try and implement it in another way just so I don’t have to talk with the _____________________ fill in the blank.

We know who the gatekeeper is and the “challenges” they can pose to a company. So, how do you overcome it?

1. Simplify. We all know DNS, DHCP, IPAM, automation, etc. weaves a complicated web – especially when the enterprise does numerous mergers and acquisitions, has different factions (i.e. standard IT vs. IT engineering vs. faculty), etc. A standard system with a simple, fluid and standard UI will ensure common configurations and provide an easy way to incorporate new configurations and systems.

2. Allow only common configurations. Use templates. Use approval processes. Automate!

3. Who doesn’t love documentation? We all look forward to going to work and doing nothing but documentation all day long. That has a sarcastic tone to it, in case you can’t tell. Documentation needs to be done, and it needs to be thorough and complete.

4. Auditing, monitoring and reporting. No more secrets. When something breaks or isn’t allowed on the network, alarms should go off like the building was on fire.

5. SIMPLIFY! I’ve mentioned it twice because I can’t stress this enough. Specifically, having a non-disparate system. Does the following sound familiar? Where’s example.com configured? Oh, it’s on the BIND server in Tokyo. Where’s company.net configured? Oh, a Windows box in New York. Admins spend more time searching for where things are located than actually doing the required work.

In short, let’s put the above list into one adjective-laced sentence: to rid your enterprise of the gatekeeper, you need a DDI solution that provides simplicity, centralization, security, traceability, scalability and intelligence. With that, your ferocious gatekeeper will be manageable.

 


Published in:


An avatar of the author

BlueCat provides core services and solutions that help our customers and their teams deliver change-ready networks. With BlueCat, organizations can build reliable, secure, and agile mission-critical networks that can support transformation initiatives such as cloud adoption and automation. BlueCat’s growing portfolio includes services and solutions for automated and unified DDI management, network security, multicloud management, and network observability and health.

Related content

Micetro_ Hybrid Cloud Integration Blog

Micetro simplifies hybrid cloud DNS and IP address management

Learn how Micetro can help you simplify and streamline DNS and IP address management across hybrid and multicloud environments.

Read more
Three operational reasons to drop legacy tools and unify your DDI

Three operational reasons to drop legacy tools and unify your DDI

Learn with BlueCat how visibility and control, process automation, and infrastructure reliability offer three reasons to adopt Unified DDI.

Read more
Micetro_ Simplify Microsoft DNS_ DHCP_ and Active Directory Sites Management

Simplify Microsoft DNS, DHCP, and Active Directory with Micetro

Learn how Micetro makes it easy to administer Microsoft DNS, DHCP, and Active Directory sites and subnets and manage your DDI environment.

Read more
Get insight into your DDI environment with Live DDI Analytics

Get insight into your DDI environment with Live DDI Analytics

Enroll in our technology preview today to use the Live DDI Analytics tool to get real-time reports and analysis for your DDI environment.

Read more