[dns-operations] about .in NS

Mark Andrews marka at isc.org
Thu Jun 1 01:57:06 UTC 2017 

In message <e448cd7b-42ec-8330-cd9c-17484e211e13 at vodafonemail.de>, Peng Yonghua writes:
> Hello,
> 
> I was confused about DNS authority for .in domain.
> 
> $ dig in ns +short|sort
> a.root-servers.net.
> b.root-servers.net.
> c.root-servers.net.
> d.root-servers.net.
> e.root-servers.net.
> f.root-servers.net.
> g.root-servers.net.
> h.root-servers.net.
> i.root-servers.net.
> j.root-servers.net.
> k.root-servers.net.
> l.root-servers.net.
> m.root-servers.net.
> 
> it shows .in is auth-resolved by root-servers.

No.  It shows operator error.  "in" is the INternet class so what
you asked for without the +short is:
 
;; BADCOOKIE, retrying.

; <<>> DiG 9.12.0-pre-alpha+hotspot+add-prefetch+marka <<>> in ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55135
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 13b6d2b66dd14d309e49bd32592f73b27f21d19563673b01 (good)
;; QUESTION SECTION:
;.				IN	NS

;; ANSWER SECTION:
.			518400	IN	NS	a.root-servers.net.
.			518400	IN	NS	b.root-servers.net.
.			518400	IN	NS	j.root-servers.net.
.			518400	IN	NS	k.root-servers.net.
.			518400	IN	NS	l.root-servers.net.
.			518400	IN	NS	d.root-servers.net.
.			518400	IN	NS	h.root-servers.net.
.			518400	IN	NS	g.root-servers.net.
.			518400	IN	NS	f.root-servers.net.
.			518400	IN	NS	m.root-servers.net.
.			518400	IN	NS	i.root-servers.net.
.			518400	IN	NS	c.root-servers.net.
.			518400	IN	NS	e.root-servers.net.

;; ADDITIONAL SECTION:
c.root-servers.net.	532496	IN	A	192.33.4.12
m.root-servers.net.	532496	IN	A	202.12.27.33
l.root-servers.net.	532493	IN	A	199.7.83.42
a.root-servers.net.	532494	IN	A	198.41.0.4
d.root-servers.net.	532496	IN	A	199.7.91.13
j.root-servers.net.	532496	IN	A	192.58.128.30
g.root-servers.net.	532496	IN	A	192.112.36.4
f.root-servers.net.	532494	IN	A	192.5.5.241
k.root-servers.net.	532494	IN	A	193.0.14.129
e.root-servers.net.	532494	IN	A	192.203.230.10
b.root-servers.net.	532494	IN	A	192.228.79.201
h.root-servers.net.	532495	IN	A	198.97.190.53
i.root-servers.net.	532493	IN	A	192.36.148.17
c.root-servers.net.	532496	IN	AAAA	2001:500:2::c
m.root-servers.net.	532496	IN	AAAA	2001:dc3::35
l.root-servers.net.	532493	IN	AAAA	2001:500:9f::42
a.root-servers.net.	532494	IN	AAAA	2001:503:ba3e::2:30
d.root-servers.net.	532496	IN	AAAA	2001:500:2d::d
j.root-servers.net.	532496	IN	AAAA	2001:503:c27::2:30
g.root-servers.net.	532496	IN	AAAA	2001:500:12::d0d
f.root-servers.net.	532494	IN	AAAA	2001:500:2f::f
k.root-servers.net.	532494	IN	AAAA	2001:7fd::1
e.root-servers.net.	532494	IN	AAAA	2001:500:a8::e
b.root-servers.net.	532494	IN	AAAA	2001:500:84::b
h.root-servers.net.	532495	IN	AAAA	2001:500:1::53
i.root-servers.net.	532493	IN	AAAA	2001:7fe::53

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Jun 01 11:53:54 AEST 2017
;; MSG SIZE  rcvd: 839

> but when I run this:
> 
> $ dig rediff.in +trace
> 
> ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.2 <<>> rediff.in +trace
> ;; global options: +cmd
> .                       141101  IN      NS      d.root-servers.net.
> .                       141101  IN      NS      l.root-servers.net.
> .                       141101  IN      NS      m.root-servers.net.
> .                       141101  IN      NS      b.root-servers.net.
> .                       141101  IN      NS      g.root-servers.net.
> .                       141101  IN      NS      k.root-servers.net.
> .                       141101  IN      NS      c.root-servers.net.
> .                       141101  IN      NS      e.root-servers.net.
> .                       141101  IN      NS      f.root-servers.net.
> .                       141101  IN      NS      a.root-servers.net.
> .                       141101  IN      NS      j.root-servers.net.
> .                       141101  IN      NS      h.root-servers.net.
> .                       141101  IN      NS      i.root-servers.net.
> ;; Received 508 bytes from 180.76.76.76#53(180.76.76.76) in 14 ms
> 
> in.                     172800  IN      NS      a0.in.afilias-nst.info.
> in.                     172800  IN      NS      a1.in.afilias-nst.in.
> in.                     172800  IN      NS      a2.in.afilias-nst.info.
> in.                     172800  IN      NS      b0.in.afilias-nst.org.
> in.                     172800  IN      NS      b1.in.afilias-nst.in.
> in.                     172800  IN      NS      b2.in.afilias-nst.org.
> in.                     172800  IN      NS      c0.in.afilias-nst.info.
> ;; Received 506 bytes from 192.203.230.10#53(192.203.230.10) in 264 ms
> 
> rediff.in.              86400   IN      NS      ns.rediffmailpro.com.
> rediff.in.              86400   IN      NS      ns2.rediffmailpro.com.
> ;; Received 79 bytes from 199.249.125.1#53(199.249.125.1) in 272 ms
> 
> rediff.in.              21600   IN      A       202.137.236.33
> ;; Received 43 bytes from 119.252.159.175#53(119.252.159.175) in 300 ms
> 
> 
> It shows .in has been resolving by afilias-nst's name servers.
> Can you help explain? thanks.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org

More information about the dns-operations mailing list