[dns-operations] Questions on private nameservers registration

[John W. O'Brien]

On 2019/11/25 19:57, Wesley Peng wrote:
> If I want to run my own nameservers, saying they are:
>
> ns1.wsly.de.   1.2.3.4
> ns2.wsly.de.   5.6.7.8
>
>
> Would I put the glues into DE's registry, or shall I put glues into all
> registries, including  COM, NET, INFO, ccTLD etc?

You would publish glue records to DE, and not to any of the others you
mentioned. The only situations where glue records are required (or even
useful) are when a resolver would be unable to traverse a referral
without them. That is, when a nameserver's name is in-baliwick of a zone
for which it is itself authoritative.

Are ns{1,2}.wsly.de authoritative for wsly.de? Then glue is required in
DE. Otherwise probably not [0].

[0] It would be theoretically possible for some other servers to be
authoritative for wsly.de while ns1.wsly.de is authoritative for
ns1.wsly.de and ns2.wsly.de is authoritative for ns2.wsle.de. In that
case, you would need glue in WSLY.DE and not in DE, but it would be very
unusual to do this in the first place and other DNS operators might look
at you funny.

-- 
John W. O'Brien
OpenPGP keys:
    0x33C4D64B895DBF3B

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20191125/e7939e48/attachment.sig>