Testing a Glue record before switching nameservers The Next CEO of Stack OverflowHow to test DNS glue record?Are major domainname registrars requiring glue records unnecessarily?Confirming the existence of GLUE recordsDNS Glue Record CreationBIND seems to ignore glue recordsFixing my glue recordsWhy does dig +trace seem to ignore the DNS glue records?DNS Glue Records and Dedicated IP AddressMy own nameservers don't work without adding glue records, why?Testing DNS glue records for hidden nameservers that aren't live yet
Can I equip Skullclamp on a creature I am sacrificing?
If Nick Fury and Coulson already knew about aliens (Kree and Skrull) why did they wait until Thor's appearance to start making weapons?
Which tube will fit a -(700 x 25c) wheel?
How to invert MapIndexed on a ragged structure? How to construct a tree from rules?
Written every which way
Why do airplanes bank sharply to the right after air-to-air refueling?
If/When UK leaves the EU, can a future goverment conduct a referendum to join the EU?
Why don't programming languages automatically manage the synchronous/asynchronous problem?
Skipping indices in a product
Is micro rebar a better way to reinforce concrete than rebar?
How do we know the LHC results are robust?
What exact does MIB represent in SNMP? How is it different from OID?
How to count occurrences of text in a file?
I believe this to be a fraud - hired, then asked to cash check and send cash as Bitcoin
What does convergence in distribution "in the Gromov–Hausdorff" sense mean?
Why am I allowed to create multiple unique pointers from a single object?
Anatomically Correct Strange Women In Ponds Distributing Swords
If the heap is initialized for security, then why is the stack uninitialized?
What is the result of assigning to std::vector<T>::begin()?
Interfacing a button to MCU (and PC) with 50m long cable
What is ( CFMCC ) on ILS approach chart?
Why is the US ranked as #45 in Press Freedom ratings, despite its extremely permissive free speech laws?
Why does standard notation not preserve intervals (visually)
What does "Its cash flow is deeply negative" mean?
Testing a Glue record before switching nameservers
The Next CEO of Stack OverflowHow to test DNS glue record?Are major domainname registrars requiring glue records unnecessarily?Confirming the existence of GLUE recordsDNS Glue Record CreationBIND seems to ignore glue recordsFixing my glue recordsWhy does dig +trace seem to ignore the DNS glue records?DNS Glue Records and Dedicated IP AddressMy own nameservers don't work without adding glue records, why?Testing DNS glue records for hidden nameservers that aren't live yet
I have a domain like example.com which I have from google domains. I created 2 nameservers and called them dns1.example.com and dns2.example.com. i finished their configuration and opened port 53 on them (22 was already open).
I then added them as glue records in google domain dns settings page.
Now is there a way to test the glue records before switching the nameservers? What I tried is to ssh into the machine using the address dns1.example.com. but that does not work, it is not able to resolve the host. Ssh with IP address works.
Why is the glue record not able to resolve the host?
I tested it with the command:
dig @dns1.example.com example.com
I get the error:
dig: couldn't get address for 'dns1.example.com': failure
If I do
dig +norec @h.gtld-servers.net. example.com NS
I do get the nameservers listed with the correct IP addresses in the ADDITIONAL SECTION.
Why is not able to get address for dns1.example.com?
dns-hosting glue-record
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I have a domain like example.com which I have from google domains. I created 2 nameservers and called them dns1.example.com and dns2.example.com. i finished their configuration and opened port 53 on them (22 was already open).
I then added them as glue records in google domain dns settings page.
Now is there a way to test the glue records before switching the nameservers? What I tried is to ssh into the machine using the address dns1.example.com. but that does not work, it is not able to resolve the host. Ssh with IP address works.
Why is the glue record not able to resolve the host?
I tested it with the command:
dig @dns1.example.com example.com
I get the error:
dig: couldn't get address for 'dns1.example.com': failure
If I do
dig +norec @h.gtld-servers.net. example.com NS
I do get the nameservers listed with the correct IP addresses in the ADDITIONAL SECTION.
Why is not able to get address for dns1.example.com?
dns-hosting glue-record
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I have a domain like example.com which I have from google domains. I created 2 nameservers and called them dns1.example.com and dns2.example.com. i finished their configuration and opened port 53 on them (22 was already open).
I then added them as glue records in google domain dns settings page.
Now is there a way to test the glue records before switching the nameservers? What I tried is to ssh into the machine using the address dns1.example.com. but that does not work, it is not able to resolve the host. Ssh with IP address works.
Why is the glue record not able to resolve the host?
I tested it with the command:
dig @dns1.example.com example.com
I get the error:
dig: couldn't get address for 'dns1.example.com': failure
If I do
dig +norec @h.gtld-servers.net. example.com NS
I do get the nameservers listed with the correct IP addresses in the ADDITIONAL SECTION.
Why is not able to get address for dns1.example.com?
dns-hosting glue-record
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I have a domain like example.com which I have from google domains. I created 2 nameservers and called them dns1.example.com and dns2.example.com. i finished their configuration and opened port 53 on them (22 was already open).
I then added them as glue records in google domain dns settings page.
Now is there a way to test the glue records before switching the nameservers? What I tried is to ssh into the machine using the address dns1.example.com. but that does not work, it is not able to resolve the host. Ssh with IP address works.
Why is the glue record not able to resolve the host?
I tested it with the command:
dig @dns1.example.com example.com
I get the error:
dig: couldn't get address for 'dns1.example.com': failure
If I do
dig +norec @h.gtld-servers.net. example.com NS
I do get the nameservers listed with the correct IP addresses in the ADDITIONAL SECTION.
Why is not able to get address for dns1.example.com?
dns-hosting glue-record
dns-hosting glue-record
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 17 hours ago
Milind
asked yesterday
MilindMilind
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked yesterday
MilindMilind
11
asked yesterday
MilindMilind
11
11
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Milind is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
A glue record for dns1.example.com will not be used in normal name resolution.
You test by digging for the NS RRs for the domain and the glue records will appear in the "ADDITIONAL SECTION" of the response. For example:
$ dig NS google.com @g.gtld-servers.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> NS google.com @g.gtld-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7732
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN NS
;; AUTHORITY SECTION:
google.com. 172800 IN NS ns2.google.com.
google.com. 172800 IN NS ns1.google.com.
google.com. 172800 IN NS ns3.google.com.
google.com. 172800 IN NS ns4.google.com.
;; ADDITIONAL SECTION:
ns2.google.com. 172800 IN AAAA 2001:4860:4802:34::a
ns2.google.com. 172800 IN A 216.239.34.10
ns1.google.com. 172800 IN AAAA 2001:4860:4802:32::a
ns1.google.com. 172800 IN A 216.239.32.10
ns3.google.com. 172800 IN AAAA 2001:4860:4802:36::a
ns3.google.com. 172800 IN A 216.239.36.10
ns4.google.com. 172800 IN AAAA 2001:4860:4802:38::a
ns4.google.com. 172800 IN A 216.239.38.10
answered yesterday
Mark WagnerMark Wagner
15.1k22246
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Milind is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960509%2ftesting-a-glue-record-before-switching-nameservers%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
A glue record for dns1.example.com will not be used in normal name resolution.
You test by digging for the NS RRs for the domain and the glue records will appear in the "ADDITIONAL SECTION" of the response. For example:
$ dig NS google.com @g.gtld-servers.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> NS google.com @g.gtld-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7732
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN NS
;; AUTHORITY SECTION:
google.com. 172800 IN NS ns2.google.com.
google.com. 172800 IN NS ns1.google.com.
google.com. 172800 IN NS ns3.google.com.
google.com. 172800 IN NS ns4.google.com.
;; ADDITIONAL SECTION:
ns2.google.com. 172800 IN AAAA 2001:4860:4802:34::a
ns2.google.com. 172800 IN A 216.239.34.10
ns1.google.com. 172800 IN AAAA 2001:4860:4802:32::a
ns1.google.com. 172800 IN A 216.239.32.10
ns3.google.com. 172800 IN AAAA 2001:4860:4802:36::a
ns3.google.com. 172800 IN A 216.239.36.10
ns4.google.com. 172800 IN AAAA 2001:4860:4802:38::a
ns4.google.com. 172800 IN A 216.239.38.10
answered yesterday
Mark WagnerMark Wagner
15.1k22246
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
add a comment |
A glue record for dns1.example.com will not be used in normal name resolution.
You test by digging for the NS RRs for the domain and the glue records will appear in the "ADDITIONAL SECTION" of the response. For example:
$ dig NS google.com @g.gtld-servers.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> NS google.com @g.gtld-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7732
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN NS
;; AUTHORITY SECTION:
google.com. 172800 IN NS ns2.google.com.
google.com. 172800 IN NS ns1.google.com.
google.com. 172800 IN NS ns3.google.com.
google.com. 172800 IN NS ns4.google.com.
;; ADDITIONAL SECTION:
ns2.google.com. 172800 IN AAAA 2001:4860:4802:34::a
ns2.google.com. 172800 IN A 216.239.34.10
ns1.google.com. 172800 IN AAAA 2001:4860:4802:32::a
ns1.google.com. 172800 IN A 216.239.32.10
ns3.google.com. 172800 IN AAAA 2001:4860:4802:36::a
ns3.google.com. 172800 IN A 216.239.36.10
ns4.google.com. 172800 IN AAAA 2001:4860:4802:38::a
ns4.google.com. 172800 IN A 216.239.38.10
answered yesterday
Mark WagnerMark Wagner
15.1k22246
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
add a comment |
A glue record for dns1.example.com will not be used in normal name resolution.
You test by digging for the NS RRs for the domain and the glue records will appear in the "ADDITIONAL SECTION" of the response. For example:
$ dig NS google.com @g.gtld-servers.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> NS google.com @g.gtld-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7732
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN NS
;; AUTHORITY SECTION:
google.com. 172800 IN NS ns2.google.com.
google.com. 172800 IN NS ns1.google.com.
google.com. 172800 IN NS ns3.google.com.
google.com. 172800 IN NS ns4.google.com.
;; ADDITIONAL SECTION:
ns2.google.com. 172800 IN AAAA 2001:4860:4802:34::a
ns2.google.com. 172800 IN A 216.239.34.10
ns1.google.com. 172800 IN AAAA 2001:4860:4802:32::a
ns1.google.com. 172800 IN A 216.239.32.10
ns3.google.com. 172800 IN AAAA 2001:4860:4802:36::a
ns3.google.com. 172800 IN A 216.239.36.10
ns4.google.com. 172800 IN AAAA 2001:4860:4802:38::a
ns4.google.com. 172800 IN A 216.239.38.10
answered yesterday
Mark WagnerMark Wagner
15.1k22246
A glue record for dns1.example.com will not be used in normal name resolution.
You test by digging for the NS RRs for the domain and the glue records will appear in the "ADDITIONAL SECTION" of the response. For example:
$ dig NS google.com @g.gtld-servers.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> NS google.com @g.gtld-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7732
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 9
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN NS
;; AUTHORITY SECTION:
google.com. 172800 IN NS ns2.google.com.
google.com. 172800 IN NS ns1.google.com.
google.com. 172800 IN NS ns3.google.com.
google.com. 172800 IN NS ns4.google.com.
;; ADDITIONAL SECTION:
ns2.google.com. 172800 IN AAAA 2001:4860:4802:34::a
ns2.google.com. 172800 IN A 216.239.34.10
ns1.google.com. 172800 IN AAAA 2001:4860:4802:32::a
ns1.google.com. 172800 IN A 216.239.32.10
ns3.google.com. 172800 IN AAAA 2001:4860:4802:36::a
ns3.google.com. 172800 IN A 216.239.36.10
ns4.google.com. 172800 IN AAAA 2001:4860:4802:38::a
ns4.google.com. 172800 IN A 216.239.38.10
answered yesterday
Mark WagnerMark Wagner
15.1k22246
answered yesterday
Mark WagnerMark Wagner
15.1k22246
answered yesterday
Mark WagnerMark Wagner
15.1k22246
answered yesterday
Mark WagnerMark Wagner
15.1k22246
15.1k22246
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
add a comment |
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Do we need to switch the nameservers for this to show up?
– Milind
yesterday
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
Yes, you will need to switch nameservers first. The glue records don't exist in example.com. They exist in .com (and gtld?) name servers.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
To answer: "Why is not able to get address for dns1.example.com?" Glue records do not appear in the ANSWER section, ever. (Also, they do not belong to the authoritative zone data.) You will need to add an A record for dns1.example.com in the normal configuration of the zone.
– Mark Wagner
9 hours ago
add a comment |
Milind is a new contributor. Be nice, and check out our Code of Conduct.
Milind is a new contributor. Be nice, and check out our Code of Conduct.
Milind is a new contributor. Be nice, and check out our Code of Conduct.
Milind is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960509%2ftesting-a-glue-record-before-switching-nameservers%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
