Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im in the process of setting up a DNS server for a domain Ive registered (lets say . Its nothing mission critical, Im just having a bit of a play. So I've been reading up on the forwarders / root hints debate (e.g. which to use) but something has just occurred to me. Assuming the DNS server Im setting up will ALWAYS ONLY serve records for do I need to configure root hints at all?

If my understanding is correct, because Im not using the DNS server for my client PC, there's no reason it should ever need to resolve anything for any other domain other than

Is my conclusion correct?

Thanks In advance Geo

share|improve this question
up vote 1 down vote accepted

Simple: no. If your server has authority or information for everything it ever will serve, then root hints are not needed.

Root hints are used to make it connect to the root (.) so that it can look up domains from there that it does not know.

share|improve this answer

because Im not using the DNS server for my client PC, there's no reason it should ever need to resolve anything for any other domain other than

That is correct.

In DNS parlance, server function can be divided into two major categories,

  • Authoritative nameservice
  • Recursive nameservice

Authoritative Nameservice -- is what you are setting up to answer queries for your domain. An authoritative server answers from information in its own data store and does not need to consult other nameservers in the resolution of a query. (It may receive the data from another server originally, such as in the case of a slave authoritative server receiving a copy of zone data from a master authoritative server, but during resolution of the query it is not asking other nameservers to provide it with data to fulfill the query.) Authoritative nameservers therefore have no need of the root hints, as they do not recursively walk the DNS tree from the root in service of queries, queries are answered from their own data store.

Recursive Nameservice -- is what your client relies on to answer general DNS queries. A recursive server does need to have root hints (either explicitly specified or built into the server) as it needs to know how to find the DNS root to walk the tree in service of queries for which it does not have a priori data.

It is possible (but not generally recommended) to have servers perform both authoritative and recursive functions, but what you are proposing is a very common scenario -- an authoritative-only server with no recursive service.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.