We have hard times setting up a DNS Zone Delegation for one of our subdomains.
We have one DNS record "_acme-challenge" that will change frequently, and this DNS record is defined directly on our server, which acts as a SECONDARY Name Server only for this record.
Our need is to have this record delegated to our SECONDARY Name Server, instead of having to change it manually in our MAIN DNS zone.
Please note that our SECONDARY Name Server is the same domain "example.com
".
Our domain name is registered at OVH : example.com
Our MAIN DNS Servers are at OVH :
- ns15.ovh.net
- dns15.ovh.net
Our example.com
content is hosted on a web server (not on OVH) having the following IP :
212.123.456.789
We do not have any problem with this DNS zone : our domain and emails are working correctly.
Our MAIN DNS zone is defined at OVH like this (shortened for brevity) :
$TTL 3600
@ IN SOA dns15.ovh.net. tech.ovh.net. (2019111705 86400 3600 3600000 300)
IN NS ns15.ovh.net.
IN NS dns15.ovh.net.
IN A 212.123.456.789
ftp IN CNAME example.com.
mail IN A 212.123.456.789
www IN CNAME example.com.
Our second DNS Server have these always existing records :
example.com. NS ns1.example.com.
ns1.example.com. A 212.123.456.789
example.com. NS ns2.example.com.
ns2.example.com. A 212.123.456.789
Our second DNS Server will regularly update the following record in its zone :
_acme-challenge.example.com TXT HereIsTheTextContent
We tried to add the following records to our MAIN DNS zone at OVH, in order to delegate this record to the SECONDARY Name Server, but had no success : _acme-challenge.example.com
does not ping at all.
ns1 IN A 212.123.456.789
ns2 IN A 212.123.456.789
_acme-challenge IN NS ns1.example.com.
_acme-challenge IN NS ns2.example.com.
We guessed that some kind of records are missing, but where ?
- Did we forget to add some records to ou MAIN DNS zone ? (defined at OVH)
- Did we forget to add some records to ou SECONDARY DNS zone ? (defined on our "example.com" hosted on our server)
I would be happy if you could pinpoint the error, and give us a clue to make it work :-)
Thanks
_acme-challenge
record?_acme-challenge
is a text record, pinging it won't work, you would need an A record for that._acme-challenge
just to add a TXT record. Also secondary/primary is on a zone base, not a record base. Delegating a zone to a set of nameservers is not the same as setting a primary/secondary link for synchronization and load balancing.