Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to configure a domain name setup like below and having trouble with Route53.

*.sub.base.com => CNAME sub.base.com

I've attempt to create a new hosted zone sub.base.com and add the NS records to base.com. This does appear to delegate (though I'm not sure it is necessary on AWS). I then add the wildcard CNAME to the sub.base.com Zone, and also add an A record to the zone. Now when I lookup a name (dig demo.sub.base.com) dig just gives me back the SOA record and doesn't resolve to the A record.

How should I be configuring this domain layout?

share|improve this question

1 Answer 1

Amazon says that Route53 was not designed to have its Name Servers hit directly, as these were designed to be hit by other DNS servers. This is why the A record past the CNAME will not resolve, because it will not iterate to the server that owns the A record. Further more it is not suggested to use the Route53 NS as your resolver.

For CNAME records route53 is authoritative for the CNAME record but not for the A record the CNAME points to. If this was a valid domain that was registered, delegated to Route 53 and you were using a non-route53 DNS server for resolving, this would work.

In conclusion, it you interrogate the DNS server that points to the servers in the route53 delegation zone it would work. If you interrogate one of the servers in the delegation zone directly it will NOT work for CNAMEs.

I know it could be hard to understand but if you give it an extra read it will make sense.

share|improve this answer
I don't think I understand that. But anyway, I'm looking more for how I should do it rather than understand why it doesn't work. I have no preference to the structure the DNS records should have, I just want something that will have my intended resolution working. –  edA-qa mort-ora-y Jan 28 at 16:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.