Great Suggestion for the DNS problem...?

Jay R. Ashworth jra at
Mon Jul 28 19:52:47 UTC 2008

On Mon, Jul 28, 2008 at 12:35:30PM -0700, Tomas L. Byrnes wrote:
> As you pointed out, the protocol, if properly implemented, addresses
> this. 
> There should always be Glue (A records for the NS) in a delegation. RFC
> 1034 even specifies this:
> 4.2.2 <snip>
> As the last installation step, the delegation NS RRs and glue RRs
> necessary to make the delegation effective should be added to the parent
> zone.  The administrators of both zones should insure that the NS and
> glue RRs which mark both sides of the cut are consistent and remain so.
> </snip>

A probably important distinction:

That's not the protocol, that's the specified implementation framework
of the protocol.  In general, DNS still works if you screw that up,
which is why it's so often screwed up.

-- jra
Jay R. Ashworth                   Baylink                      jra at
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates                     '87 e24
St Petersburg FL USA             +1 727 647 1274

	     Those who cast the vote decide nothing.
	     Those who count the vote decide everything.
	       -- (Josef Stalin)

More information about the NANOG mailing list