Today we had a bit of a stop and think moment with a delegated domain; it was a good thought experiment to walk though.<\/p>\n\n\n\n
So let’s say you have a sub-domain thing.example.com<\/strong> of the domain example.com<\/strong>. The thing.example.com<\/strong> has been delegated by the administrators of example.com <\/strong>to a 3rd party who will manage the namespace for the sub-domain thing.example.com<\/strong> themselves on their own Name Servers.<\/p>\n\n\n\n To facilitate the above the administrators of example.com have added a couple of Name Server records (NS) records into example.com domain as below to delegate that domain to AWS Route53 (for example):<\/p>\n\n\n\n No problem so far.<\/p>\n\n\n\n However we then got a request. The administrators of the subdomain thing.example.com<\/strong> are no longer available, so we need you (the administrators of example.com<\/strong>) to add a record into the sub-domain, can you do that?<\/p>\n\n\n\n After a bit of thought the answer is of course…..NO<\/p>\n\n\n\n The sub-domain (thing.example.com<\/strong>) has been delegated to someone else, i.e. the authority for that part of the DNS “tree” has been delegated to someone else to manage.<\/p>\n\n\n\n Therefore us (as the administrators of the parent domain example.com<\/strong>), the only thing we can do is remove the delegation, but if we did that we’d need to know what records were in that sub-domain so we could add them to our Name Servers, or stuff would stop working.<\/p>\n\n\n\n When you delegate a sub-domain to a 3rd party, you as the parent domain administrators have no control over the records within the delegated sub-domain (zone), that “authority” is owned by to whomever you have delegated the domain too.<\/p>\n\n\n\n Ergo, if someone wants say an A Record adding to the sub-domain, you as a the parent domain administrator can’t do this only the sub-domain administrator can!<\/p>\n","protected":false},"excerpt":{"rendered":" Today we had a bit of a stop and think moment with a delegated domain; it was a good thought experiment to walk though. So let’s say you have a sub-domain thing.example.com of the domain example.com. The thing.example.com has been delegated by the administrators of example.com to a 3rd party who will manage the namespace … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":4327,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,8],"tags":[],"class_list":["post-4614","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns","category-infoblox"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4614"}],"version-history":[{"count":2,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4614\/revisions"}],"predecessor-version":[{"id":4616,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/4614\/revisions\/4616"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/media\/4327"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4614"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}NS thing ns-169.awsdns-21.com\n\nNS thing ns-245.awsdns-21.com<\/code><\/pre>\n\n\n\nConclusion<\/h3>\n\n\n\n