Share via


DNS Glue records

Question

Tuesday, September 20, 2011 10:02 PM

when excatley should you have a glue record for your name server? (the "a" record for the name server ie, ns1.example.com IN A 10.1.1.1)

been reading thru the copyus documentation about DNS. and it looks like subdomains, or delatagated domains only get them?

 

like example.com would not, but hr.example.com would? how would example.com ns record get resolved in that case? from root?

All replies (4)

Wednesday, September 21, 2011 7:21 AM ✅Answered

Hi,

Thanks for posting here.

 

That’s correct , be more specific, only if we also want to delegate subdomain hr.example.com to DNS servers ns1.example.com and ns2.example.com and have already configured glue records for both servers. With this configurations, current DNS server will guide incoming query to DNS servers 10.1.2.30 or 10.5.60.22 for query domain hr.example.com and we should have already configured zone hr.example.com. on both servers.

 

<current domain > IN ns ns1.example.com

<current domain > IN ns ns2.example.com

 

hr.example.com. IN NS ns1.example.com

hr.example.com. IN NS ns2.example.com

 

ns1.example.com IN A 10.1.2.30

ns2.example.com IN A 10.5.60.22

 

“Delegation and Glue Records” in Resource Record Types

http://technet.microsoft.com/en-us/library/cc958958.aspx

 

Thanks.

 

Tiger Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


Tuesday, September 20, 2011 11:19 PM

Are we speaking of a public DNS server, or a private, internal server, such as for AD?

If speaking about a public nameserver, your hostname server must be registered with the registrar with your server's hostname (the FQDN) and it's IP address, which is the glue record (the FQDN and IP). Keep in mind, the registrar requires a minimum of two hostname servers.

 

What Is A Glue Record - A glue record is the IP address of a name server held at the domain name registry. Glue records are required when you wish to set the name

servers of a domain ...
http://faq.domainmonster.com/dns/glue_record/

DNS Tools - Glue Records - This article describes what glue records are and when you need to use them and how to check it.
http://www.webdnstools.com/dnstools/articles/glue_records

Name Server Record (NS)
"The A RRs which define name server that lie within the domain are frequently called glue records. Strictly glue records are essential only with referrals which include name servers within the domain being queried. Glues are used for two purposes..."
http://www.zytrax.com/books/dns/ch8/ns.html

 

Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

This posting is provided AS-IS with no warranties or guarantees and confers no rights.


Tuesday, September 20, 2011 11:58 PM

both, for AD, and for normal zones. so the glue record is an a record upstream?

example:
I own say, example.com, so in the example.com config is:

ns ns1.example.com
ns ns2.example.com

a ns1.example.com 10.1.2.30
a ns2.example.com 10.5.60.22

 

and in the .com zone, ie the register:

ns ns1.example.com
ns ns2.example.com

a ns1.example.com 10.1.2.30
a ns2.example.com 10.5.60.22

and for sub domains:

hr.example.com

ns ns1.example.com
ns ns2.example.com

hr.example.com does not need a glue record because example.com and .com zones both have them? correct?


Wednesday, September 21, 2011 1:36 AM

In an AD environment, it's simply the NS records as you've defined them in the zone properties, Nameservers tab. Look in your zone, you can see the NS records.

You can also run nslookup to view them:

c:\nslookup
set q=ns
example.com

(you should see the correct NS records appear)

Then to see the SOA:

set q=soa
example.com

 

 

 

Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

This posting is provided AS-IS with no warranties or guarantees and confers no rights.