question about domain

M. Meadows sun-guru at
Wed Jun 15 23:41:21 UTC 2011

The DNS admins at seem to feel that this nameserver mismatch is working as expected. Here's some of the feedback we received from them when we questioned the setup:

~~~~~~~~~~~~~~~~~~~~~We use load balancers for
the majority of our internet facing URLs. We have multiple datacenters. We
typically have our URLs defined in multiple datacenters. Each datacenter has a
pair of redundant load balancers. Typically each URL we have is defined in each
datacenter with its own address. The active load balancer in a particular
datacenter 'owns' one of the NS servers you see when you lookup our
authoritative name servers, ie: ns1 or There is
a 'floating' address shared between the active and failover load balancers
that is associated with ns1 or 


hfdns3, hfdns4, simns3,
simns4 are the addresses for the specific bind processes running on the actual
physical devices. will
be shared between hfdns3 and hfdns4. between the simns3 and
simns4 name servers.


So I'm just wondering if anyone still feels that the nameserver mismatch seen with the digs in earlier parts of this email thread may present a problem to servers requesting name resolution for address records in the "" domain.


From: sun-guru at
To: michael at
Subject: RE: question about domain
Date: Wed, 15 Jun 2011 12:59:32 -0400
CC: bind-users at


Just wanted to say thanks to everyone for the quick feedback!

We appreciate your assistance on this.





> Date: Wed, 15 Jun 2011 08:25:00 -0700
> From: michael at
> To: sun-guru at
> CC: bind-users at
> Subject: Re: question about domain
> On Wed, 15 Jun 2011, M. Meadows wrote:
> > Question : our check of whois indicates that and are
> > the authoritative nameservers for A dig with a +trace for
> > seems to indicate that they are indeed the auth nameservers. It?s
> > interesting, though, that an lookup for
> > query for NS records shows a non-authoritative answer of
> >,,,
> > and We?re unsure what?s going on with that.
> Instead of doing 'dig +trace', do 'dig +trace ns 
>', and you'll see the problem.
> This is a classic authority mismatch, as others have pointed out.
> michael

bind-users mailing list
bind-users at 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the bind-users mailing list