[Pdns-users] in.addr-arpa delegation

Derrik Pates demon at devrandom.net
Thu Feb 23 14:55:27 UTC 2006


Kai wrote:
> There is something I've only discovered a few months ago which seems to
> nicely work.
> 
> Instead of delegating the weird and nonstandard '0/29', you actually can
> delegate 0 through 15 by only supplying NS records:
> 
> $ORIGIN 0.0.10.in-addr.arpa.
> 0	IN	NS	ns1.foo.com.
> 	IN	NS	ns2.foo.com.
> 1	IN	NS	ns1.foo.com.
> 	IN	NS	ns2.foo.com.
> 2	IN	NS	ns1.foo.com.
> 	IN	NS	ns2.foo.com.
> ...etc

Actually I really don't like this, as it encourages intentional breaking
of the hierarchical nature of DNS. That's what RFC 2317 is all about -
not breaking the DNS hierarchy, while still being able to subdelegate
reverse DNS.

> ns1 and ns2.foo.com can run any nameserver they want, without being forced
> to use any bind specific hacks.

RFC 2317 is hardly "BIND specific" - we use it all the time with
PowerDNS with a MySQL backend, and I wrote a custom frontend that
handles the CNAMEs for the RFC 2317-style delegations automatically,
making the process near-transparent. (Hooray for transactions...)

-- 
Derrik Pates
demon at devrandom.net


More information about the Pdns-users mailing list