0

I have a 2nd-level domain we'd like to use for mapping to our internal services on a linux server of ours. The domain is registered via 1&1, and I'd like to have the domain set up such that ns1.ourdomain.com, ns2.ourdomain.com, etc. point to static IPs we have assigned to our server, and any other subdomains besides these (+ the root domain itself) are managed by the name servers we have set up. Is this possible?

Also, how does the interaction between a client and a nameserver work when the primary nameserver fails to resolve a domain (two cases: [1] ns is down [2] the record does not exist)? Does the client then contact the secondary nameserver for an attempt at resolution? (in both cases?)

1
  • 2
    That's not a top-level domain. "com" is a top-level domain.
    – EEAA
    Aug 21, 2012 at 0:07

1 Answer 1

2

What you have described about your servers being authoritative for all subdomains is normal unless you decide to delegate subdomains to other servers. Even that, that delegation is controlled by the servers all the way back to the root. Thus, I'll focus on the rest of your question:

Also, how does the interaction between a client and a nameserver work when the primary nameserver fails to resolve a domain (two cases: [1] ns is down [2] the record does not exist)? Does the client then contact the secondary nameserver for an attempt at resolution? (in both cases?)

If a nameserver is down, then no response will be given and the client will try other servers listed in the record. Note that primary and secondary servers have meaning for client machines and have meaning for setting up the server (master / slave is more accurate for server side), but as far as your actual NS records, no ordering is applied.

If a record doesn't exist, then the authoritative servers will return a NXDOMAIN response. Caching servers will return that same response on subsequent queries as long as the query hasn't timed out based on the SOA record's timeout value. Note that this is not always well-respected.

If an authoritative server simply isn't reached then an alternate response is given, typically a SERVFAIL. See https://stackoverflow.com/questions/73433/does-a-caching-nameserver-usually-cache-the-negative-dns-response-servfail

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .