RD flag for per-domain forwarding

Nick Tait nick at tait.net.nz
Wed Oct 8 05:20:02 UTC 2025


On 08/10/2025 09:14, Darren Ankney wrote:
> You could setup example.org and my.example.org as type "mirror"
> (https://bind9.readthedocs.io/en/v9.18.36/reference.html#namedconf-statement-type%20mirror)
> if you are able to allow a zone transfer to your recursive nameserver
> from 1.1.1.1 and 2.2.2.2.  If you can't, then perhaps type "stub"
> could work:https://bind9.readthedocs.io/en/v9.18.36/reference.html#namedconf-statement-type%20stub

Please be aware of the following for mirror zones (from the first link 
above):

    /Use of this zone type with any zone other than the root should be
    considered experimental and may cause performance issues, especially
    for zones that are large and/or frequently updated./

(Perhaps a secondary zone would be a safer option than a mirror zone?)

But I also agree that a stub or static-stub zone is a good option to 
solve your problem.

Nick.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20251008/aab275f6/attachment.htm>


More information about the bind-users mailing list