[dns-operations] a question about the nameservers

Olafur Gudmundsson ogud at ogud.com
Fri Oct 26 14:35:38 UTC 2012


On 26/10/2012 05:43, Feng He wrote:
> Hi,
>
> If the nameservers in parent is different from the ones in 
> auth-servers, what will happen?
>
> For example, with this case you can see the difference.
>

Take a look at this: 
https://www.dns-oarc.net/files/workshop-201103/ICANN-SF-Looking-at-DNS-traces.pdf

There is difference in how resolvers behave some resolvers will store 
the first
NS set they see and use that one  (Parent centric resolvers)
Others will accept NS set from child and over ride the first one (Child 
centric)
If the child use minimal answer may resolvers are forced into
Parent centric mode as they NEVER ask the child what its NS set is.

There are resolvers out there that use the Parent NS for the first query but
explicitly ask one of the name servers in the Parent NS set what the 
child version is.

In short there are multiple behaviors out there and disagreement on what the
"correct" behavior is.
The child's interest are best served if the Parent and Child NS sets are 
identical.

     Olafur




More information about the dns-operations mailing list