[Best practice] Internal zone

Jeremy MAURO jmauro at antidot.net
Tue Nov 15 12:50:54 UTC 2011

Hi everyone,

I asking you all for you best practice regarding your internal DNS and 

I have a 2 DNS servers used as Internal DNS and Resolvers, here is the 
dilemma, should I declare in each internal zone my NS with a glue record:

$ORIGIN example.internal.
; NS records
                 IN      NS      ns1
                 IN      NS      ns2
ns1           IN      A
ns2          IN      A

Or should I point toward the NS server from my principal zone:

$ORIGIN example.internal.
; NS records
                 IN      NS      ns1.principal.internal.
                 IN      NS      ns2.principal.internal.

Which one of those 2 samples is the best one and the closer from the 
RFCs? As far as I know, the second sample should be the best one since 
the RFC 1912 says "Some people get in the bad habit of putting in a glue 
record whenever they add an NS record 'just to make sure'."

Any opinion is approached.


More information about the bind-users mailing list