nameserver registration

Michael Sinatra michael at
Sat Jun 18 20:25:53 UTC 2011

On 06/18/11 10:26, David Miller wrote:

> All domains, at every level, have to configure their records such that
> the tree can be walked from root to their domain.
> Follow the "."s.
> For:
> com. must be delegated by .
> must be delegated by com.
> must be delegated by
> must be delegated by
> must be delegated by
> The wikipedia article on DNS is quite good:
> In the particular case of the OP - has name servers under
> To make lookups for records under, resolvers walk the tree
> from "." to "net." and get NS records - and
> You can't insert glue records into net. for name servers that exist
> under com., so now resolvers walk the tree from "." to "com." to get the
> name servers for which in the OP's case are - GoDaddy name
> servers.

In theory, you can insert glue records anywhere above the zone in 
question.  See RFC 2181, section 5.4.1.

As an example, glue for the servers and exist in the root zone.

> If there are no glue records in com. for and
>, then resolvers will just ask the authoritative name
> servers for (which in the OP's case are - GoDaddy name
> servers) for the A/AAAA records for and
> If the GoDaddy name servers provide A/AAAA records for
> and, then resolution works and
> everyone is happy.
> Glue is only required if that is the only way to traverse the tree to
> get to the IP addresses for the name servers for a domain.

A registrar can't know this a priori, and more importantly, can't know 
that it will always be the case with a particular domain and/or NS RRs. 
  Registrars therefore have to require registered DNS servers when a 
registrant wants a new domain.

> Can someone point to an RFC or BCP that says that *all* name servers *must* have glue present in their parent?

I doubt such an RFC exists.  RFC 1912, section 2.3 does a nice job of 
summing up where glue is necessary and where it isn't, but that doesn't 
take into account NS records that are in zones that are completely 
outside the administration of the registrar and/or registrant.


More information about the bind-users mailing list