Removing root zone hints for authoritative nameservers

Wiley Sanders bind at
Fri Feb 17 21:54:25 UTC 2006

Thanks to all who replied to my query. I'm not going to remove the
root zone hints just yet, they are cached and don't really hurt
performance that much.

What's interesting is that I enabled zone-statistics and I'm having
fun looking at the data. I've found that I am sending "referral
responses" for reverse zones I *am* authoritative for, and for a valid
reason - "classless" reverse delegation. These zones are somewhat
oddly configured, with an NS record assigned to each of the individual
IPs in the class-C. For example:

$ dig any
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 183
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;     IN      ANY

;; ANSWER SECTION: 1172 IN      NS

;; ADDITIONAL SECTION:      83964   IN      A

$ dig +trace any
[. query deleted, yadda yadda yadda]
[ query deleted, yadda yadda yadda]  86400   IN      NS  86400   IN      NS
;; Received 88 bytes from in 86 ms 3600 IN      NS
;; Received 74 bytes from in 36 ms 86400 IN     PTR  86400   IN      NS  86400   IN      NS  86400   IN      NS
;; Received 179 bytes from in 53 ms

Removing the root zone hints wouldn't affect this, I just wanted to
post this to show there was a valid reason for authoritative only
servers to return referral responses.

-Wiley Sanders

More information about the bind-users mailing list