<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">Yes, you can forward to a subdomain. Just define it as a separate zone and include the forwarders and forward-only lines. I believe you need allow-query-cache for this to work.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">Delegated zones don’t necessarily need to respond with SOA and NS records. Many load balancers use delegated zones for global server load balancing. Just point your NS records at the
load balancer and it should refer the querying DNS server along to the load balancer. Assuming something else is doing the recursive lookups, you just need allow-query for this. If this device is doing the recursive lookups, then you need allow-recursion
for this to work.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">You do need SOA and NS records if you are going to set up either a secondary or a stub zone. In this case, you would need allow-query.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black">bind-users <bind-users-bounces@lists.isc.org> on behalf of Bind Users <bind-users@lists.isc.org><br>
<b>Reply-To: </b>Mik J <mikydevel@yahoo.fr><br>
<b>Date: </b>Monday, March 6, 2017 at 10:24<br>
<b>To: </b>Bind Users <bind-users@lists.isc.org><br>
<b>Subject: </b>Difference between delegation and forward zone<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div id="yui_3_16_0_ym19_1_1488816883107_7474">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">Hello,<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_7479">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_7480">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">I would like to check if my understanding is correct regarding delegation and forward<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11220">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11222">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">Delegation: I want to delegate the administrative tasks to someone else for one subdomain<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11221">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">subdomain1.mydomain.org<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11224">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">I'll specify the NS of that subdomain1.mydomain.org in my mydomain.org zone file<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11242">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">The other person will be able to create rr1.subdomain1.mydomain.org<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11225">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_11226">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">Forward zone: I can forward a specific zone to a DNS that is different from the default fowarders or I won't attempt to do an iterative lookup.<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_16758">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_14908">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">=> Question 1: Can I have a forward zone that is a subdomain subdomain1.mydomain.org ? Or when the zone is a subdomain of mydomain (I'm athoritative) it's always
a delegation ?<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_18597">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_18598">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">=> Question 2: When I do a delegation, is it correct that the remote DNS server holding subdomain1.mydomain.org must always answer the SOA with SOA records
and NS records (RFC 2181 chapter 6.1)<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_22288">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_22306">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black">Regards<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_ym19_1_1488816883107_18592">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica Neue";color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</body>
</html>