Questions tagged [glue-record]

A glue record is a term for a record that's served by a DNS server that's not authoritative for the zone, to avoid a condition of impossible dependencies for a DNS zone.

The primary reference is:

  • RFC 1033 - Domain Administrators Operations Guide

An excerpt from the RFC explains the topic concisely:

GLUE RECORDS

If the name server host for a particular domain is itself inside the
domain, then a 'glue' record will be needed.  A glue record is an A
(address) RR that specifies the address of the server.  Glue records
are only needed in the server delegating the domain, not in the
domain itself.

Glue records are found in the ADDITIONAL section of a DNS packet. They are the A and/or AAAA records associated with a nameserver that control of a domain is being delegated to by a nameserver higher in the hierarchy.

Nameserver glue is frequently provided by the Top Level Domain (TLD) nameservers in order to facilitate domains that provide name servers within the same domain that they are authoritative for. Without this glue, it would be impossible for an empty resolver cache to find the IP address of the authoritative nameservers due to recursive dependencies.

TLD glue records are usually configured through a web interface provided by the domain registrar that the domain was obtained through. Non-TLD glue is typically added to the same zone file that is performing the delegation, making the inclusion of a trailing dot mandatory within the definition.

Also see: What is a glue record?

56 questions
203
votes
5 answers

What is a glue record?

This is a Canonical Question about DNS glue records. What exactly (but briefly) is a DNS glue record? Why are they needed and how do they work?
LanceBaynes
  • 3,087
  • 9
  • 29
  • 31
38
votes
5 answers

How to test DNS glue record?

Hello I have just set up a DNS server for my domain example.org with 2 name servers ns1.example.org and ns2.example.org. I have attempted to set up a glue record for ns1 and ns2 at my registrar. It seems to work for now when I do a dig example.org…
Sunnz
34
votes
3 answers

Is dig +trace always accurate?

When the accuracy of a DNS cache is in question, dig +trace tends to be the recommended way of determining the authoritative answer for an internet facing DNS record. This seems to be particularly useful when also paired with +additional, which also…
Andrew B
  • 32,588
  • 12
  • 93
  • 131
33
votes
2 answers

What is the role of NS records at the apex of a DNS domain?

$ORIGIN example.com. ; not necessary, using this to self-document $TTL 3600 @ IN SOA ns1.example.com. admin.example.com. ( 1970010100 7200 1800 1209600 300) @ IN NS ns1.example.com. @ IN …
Andrew B
  • 32,588
  • 12
  • 93
  • 131
25
votes
3 answers

Problems with DNS propagation 10 days after a change was made

The engineering team I work with has been in the process of moving equipment from one datacenter to another. Ten days ago we moved one of our name servers authoritative for our client's domains (ns1.faithhiway.com) and updated its IP address with…
runlevelsix
  • 2,619
  • 22
  • 20
12
votes
3 answers

When are DNS "glue" (or "host") records needed?

I kind of know why glue records are needed (cyclic dependencies), but when are they needed? Are they only needed when setting a domain's nameservers to my own machine on the internet - like "ns1.mydomainonmyserver.com" ?? Is there any need / point…
Dougal
  • 317
  • 1
  • 5
  • 11
10
votes
1 answer

NS records chicken and egg: NS in the domain it's serving

I've dealt with BIND for years and this has always kind of bugged me. $ dig google.com ns ;; QUESTION SECTION: ;google.com. IN NS ;; ANSWER SECTION: google.com. 87046 IN NS ns3.google.com. etc... ;; ADDITIONAL…
6
votes
1 answer

Why does dig +trace seem to ignore the DNS glue records?

Here are my questions: Why does dig +trace ignore the Glue Records? Is this behavior specific to dig or dig +trace, or does a recursive name server also "manually verify" glue records it receives? Here is the longer explanation: This is the full…
Eddie
  • 193
  • 6
6
votes
2 answers

What is the difference between the NS records and the glue records?

I have two glue records at Godaddy, for example: NS1.MYDNSSERVER.COM NS2.MYDNSSERVER.COM And I have three NS records in my domain: NS1.MYDNSSERVER.COM NS2.MYDNSSERVER.COM NS3.MYDNSSERVER.COM If I have glue records why do I need the NS…
Noamway
  • 153
  • 2
  • 8
5
votes
3 answers

When does the TLD having glue records for the nameservers save DNS lookups?

My understanding is that if I have the nameservers for both example1.com and example2.us set to ns1.example2.us and ns2.example2.us, looking up www.example1.com will: look up example1.com to find its nameservers, yielding no glue records (.com…
Isaac
  • 534
  • 2
  • 11
  • 24
4
votes
1 answer

Where does the "A" record go for a sub-domain?

I'd like to create a sub-domain, like sub.example.com. I have already configured example.com with NS "glue" records to point to the DNS server which will manage the sub-domain. They look like: sub IN NS other.dns.server.example.com. Where…
Christopher
  • 143
  • 1
  • 6
4
votes
2 answers

Fixing my glue records

In reference to this question, I've been working with skv to fix their glue records and I'm sort of wondering what I should be seeing. They've called DNSMadeEasy and got assistance creating the glue records. Here's what I see when I query a TLD…
tcv
  • 651
  • 8
  • 21
4
votes
1 answer

Caching DNS returns SERVFAIL for NS record, but dig +trace disagrees?

This question is similar, but doesn't elaborate on the confusing case of a why a NS record cannot be obtained. One of our caching DNS environments (RHEL 5.8, BIND 9.3.6-20.P1.el5_8.4) has ceased to return any useful data at all for a zone. Usually…
Andrew B
  • 32,588
  • 12
  • 93
  • 131
4
votes
2 answers

Does a domain's Glue Records get transferred when I transfer the domain to another registrar?

I have a domain, call it DOMAIN.NET, which is an Internet service provider. DOMAIN.NET has Glue Records that I put in via the existing registrar, which enable the client domains like FOO.COM, BAR.COM, BAZ.COM, etc. to use NS1.DOMAIN.NET and…
Crash Override
  • 601
  • 1
  • 10
  • 21
3
votes
1 answer

Glue records for sub domains?

Let's say I own example.com I created an A record called dns.example.com then point it at a nameserver. On the nameserver I gave it the name ns1.dns.example.com and also dns.example.com Now I'm confused. Do I create glue records of…
lbanz
  • 1,609
  • 5
  • 20
  • 30
1
2 3 4