For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OTS02's avatar
OTS02
Icon for Cirrus rankCirrus
Jan 18, 2017

subdomain DS record creation in zonerunner

I have a domain and subdomain in GTM. I have recently created DNSSEC zones for both. I have posted the DS records for both on the root servers, via my registrar (Google). The top domain is good for D...
application delivery
BIG-IP
devops
Pirooz_327830's avatar
Pirooz_327830
Icon for Nimbostratus rankNimbostratus
Jul 20, 2017

Did you ever get an answer to this? We have same problem

 

OTS02's avatar
OTS02
Icon for Cirrus rankCirrus
Jul 21, 2017

Hello Pirooz,

 

I never got an answer. I had a difficult time delegating a sub-domain to a 3rd party. None of the posts that I found were helpful. I set up a test DNS server to simulate the 3rd party DNS server (on a totally separate domain) and started trying different things, until I got the delegation to work. It is quite simple - the key is - you DO NOT create the sub-domain on the parent-domain's DNS server - you only create a NS record for the sub-domain (that points to the 3rd party DNS) on the parent-domain.

 

Regarding the DNSSEC for the sub-domain, I think that the 3rd party would have to create the DS record, and post it to their registrar. But I have not proved it out.