We have about 10 domains in 10 different countries and we want to setup some centralized DNS management. Basically we have this design in mind (all servers are RHEL, with bind as DNS):
Have 1 master DNS server hidden, not accessible from internet, which contains zone files for all these domains, so that we can change everything on 1 place. Have slave DNS servers in each country to which these zones are respectively replicated to from master server.
The weird part of this design as I see it, is that only slave servers would be in DMZ and accessible from internet, and only them would be authoritative, having NS record for each such domain.
Does it make any sense? Is it even possible to have a master server for a domain that isn't considered authoritative as it doesn't itself have NS record? (there is no point in having NS record for server that's not visible from internet I guess).