<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>Due to a requirement to use something Microsoft crafted, we are
being asked to assert (internally) authority over 3rd-level names
under <span><span class="ui-provider gp b c d e f g h i j k l m n
o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">appserviceenvironment.net
<br>
</span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">I've
pushed back on this, because I don't think it's nice to
publish "authoritative" answers in domains we have not been
delegated. But I'm told it's all ok, because Microsoft says
its ok* Having accepted that the ship has sailed, it's now a
question of how to deliver such answers.</span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">One
obvious way is to define a zone for each 3rd level under </span></span><span><span class="ui-provider gp b c d e f g h i j k l m n o p q r s t u
v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">appserviceenvironment.net,
and publish them in a way our resolvers can find them. In the
absence of catalog-zones, this could be a lot of additional
work (for me).<br>
</span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">Then I
wondered if adding these 'hijacked' names to our RPZ would
meet the need. I first thought, "Yeah. It'll work.", but then
I re-read the statement from MS saying each 3rd level was
going to need to have a 4th level zone defined. A zone
definition requires at least an SOA and NS record . . and
last time I checked, an RPZ would not deliver an NS record. So
it seems that idea may be squashed. <br>
</span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">Who
else has need to publish locally-defined
appserviceenvironment.net names? Were you able to do it with
your RPZ?<br>
</span></span><span><span class="ui-provider gp b c d e f g h i
j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"></span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr">*
<a class="moz-txt-link-freetext" href="https://learn.microsoft.com/en-us/azure/app-service/environment/create-ilb-ase">https://learn.microsoft.com/en-us/azure/app-service/environment/create-ilb-ase</a></span></span></p>
<p><span><span class="ui-provider gp b c d e f g h i j k l m n o p q
r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"><br>
</span></span></p>
<pre class="moz-signature" cols="72">--
--
Do things because you should, not just because you can.
John Thurston 907-465-8591
<a class="moz-txt-link-abbreviated" href="mailto:John.Thurston@alaska.gov">John.Thurston@alaska.gov</a>
Department of Administration
State of Alaska</pre>
</body>
</html>