Simple DNS Plus
Edit this page

Did you notice something wrong or unclear, or want to add something more to this page?

Great !!

You can edit the source text of this page on GitHub (click here to learn how).

After you submit your changes ("pull request"), we will review it and update the page.

How to sub-delegate a reverse zone

If for example you are an ISP providing Internet connections to your customers, you can sub-delegate reverse DNS for the IP addresses that you provide to your customers to the customers' own DNS servers.
This makes it possible for your customers to control their own reverse DNS without contacting you every time they need this updated.
Typically you would only do this for customers with multiple static IP addresses.
For customers with only one IP address or dynamic IP addresses, it usually makes more sense to host the reverse DNS records on your own DNS server.

Before you can sub-delegate reverse DNS to others, reverse DNS for your IP range(s) must of course first be delegated to your DNS servers. For more on this see this article.

Sub-delegate more than a class C (> 256 IP addresses)

If you want to sub-delegate reverse DNS for an IP address range larger than a class C (> 256 IP addresses) then you must break this into multiple class C sub-delegations (see below).

Sub-delegate full class C (256 IP addresses) from a class B or larger (65536+ IP addresses)

If you have at least a class B (65536 IP addresses) and provide a class C (256 IP addresses) from this to a customer, the reverse DNS sub-delegation is done simply by adding NS-records for the customer's DNS servers.
For example say you have IP addresses 11.22.0.0/16 and you want to sub-delegate reverse DNS for 11.22.33.0/24 to your customer's DNS servers.
Then in your "22.11.in-addr.arpa" zone, you would add an NS-record for "33.22.11.in-addr.arpa" for each of your customer's DNS servers like this:

NS: 33.22.11.in-addr.arpa -> ns1.customer.com
NS: 33.22.11.in-addr.arpa -> ns2.customer.com

Sub-delegate full class C (256 IP addresses) from less than a class B (< 65536 IP addresses)

If you have multiple class Cs (multiple sets of 256 IP addresses) but not a full class B, then the best way to sub-delegate reverse DNS for one of those class Cs is to ask your IP address provider to create/change this delegation on their DNS servers.
Technically you could use "classless IN-ADDR.ARPA delegation" (see below) but this is not recommend for a full class C because the customer will (rightly) expect a standard reverse delegation (as above).

Sub-delegate less than a class C (< 256 IP addresses) from a class C or larger (256+ IP addresses)

If you have at least a class C (256 IP addresses), and you want to sub-delegate reverse DNS for only part of a class C to your customer's DNS servers, this is typically done using the "classless IN-ADDR.ARPA delegation" style described in RFC2317.
Technically it is possible to use other sub-delegation naming styles, but we highly recommend that you stick with the RFC2317 style because this is much more likely to work with various tools and programs. For example, the GUI record editor in Simple DNS Plus automatically recognizes the RFC2317 zone naming style as a reverse zone.

For example say you have IP addresses 11.22.33.0/24 (11.22.33.0 to 11.22.33.255) and you want to sub-delegate reverse DNS for 11.22.33.64/30 (11.22.33.64 to 11.22.33.67) to your customer's DNS servers.
Then in your "33.22.11.in-addr.arpa" zone, you would add an NS-record for "64/30.33.22.11.in-addr.arpa" for each of your customers's DNS servers, and a CNAME-record for "XX.33.22.11.in-addr.arpa" pointing to "XX.64/30.33.22.11.in-addr.arpa" for each of the IP addresses in the customer's IP range where XX is the last segment of each IP address like this:

NS: 64/30.33.22.11.in-addr.arpa -> ns1.customer.com
NS: 64/30.33.22.11.in-addr.arpa -> ns2.customer.com
CNAME: 64.33.22.11.in-addr.arpa -> 64.64/30.33.22.11.in-addr.arpa
CNAME: 65.33.22.11.in-addr.arpa -> 65.64/30.33.22.11.in-addr.arpa
CNAME: 66.33.22.11.in-addr.arpa -> 66.64/30.33.22.11.in-addr.arpa
CNAME: 67.33.22.11.in-addr.arpa -> 67.64/30.33.22.11.in-addr.arpa

Your customer would setup a zone called "64/30.33.22.11.in-addr.arpa" on his DNS server with the following records:

SOA: 64/30.33.22.11.in-addr.arpa ...
NS: 64/30.33.22.11.in-addr.arpa -> ns1.customer.com
NS: 64/30.33.22.11.in-addr.arpa -> ns2.customer.com
PTR: 64.64/30.33.22.11.in-addr.arpa -> [reverse DNS name for IP 11.22.33.64]
PTR: 65.64/30.33.22.11.in-addr.arpa -> [reverse DNS name for IP 11.22.33.65]
PTR: 66.64/30.33.22.11.in-addr.arpa -> [reverse DNS name for IP 11.22.33.66]
PTR: 67.64/30.33.22.11.in-addr.arpa -> [reverse DNS name for IP 11.22.33.67]

Sub-delegate from less than a class C (< 256 IP addresses)

If you have an IP address range of less than 256 IP addresses, then the best way to sub-delegate reverse DNS for part of that range is to ask your IP address provider to create/change this delegation on their DNS servers.
Technically you could create another level of CNAME redirection similar to "classless IN-ADDR.ARPA delegation" (see above) but this is not recommend because the redirection becomes too deep.

Related KB articles:

Comments

Simple DNS Plus

  • Home
  • Search
  • Product details

  • Features
  • Screen shots
  • Plug-ins
  • Tools & Add-ons
  • Testimonials
  • What's new
  • Release notes
  • Download

  • Download
  • Buy

  • Pricing
  • New license
  • Additional license
  • Upgrade
  • Support

  • Overview
  • Lost License Key
  • Knowledge Base
  • Online documentation
  • Contact us