octodns.zone.ns
Classes
|
Checks that NS records pointing to targets within the same zone have corresponding A or AAAA "glue" records. |
|
Checks that all |
|
Checks that NS records do not point to targets that are CNAMEs within the same zone. |
- class octodns.zone.ns.GlueForInZoneNsZoneValidator(id, sets=None)[source]
Bases:
ZoneValidatorChecks that NS records pointing to targets within the same zone have corresponding A or AAAA “glue” records. Without these address records, resolvers cannot follow the delegation because they would need to resolve the name server’s address using the very name servers they are trying to locate.
Example
Zone
example.com.hasNS ns1.example.com.This validator ensures an
AorAAAArecord exists forns1.example.com.within theexample.com.zone.
Reference: https://datatracker.ietf.org/doc/html/rfc1033 (Operations)
- class octodns.zone.ns.NsTargetNotCnameZoneValidator(id, sets=None)[source]
Bases:
ZoneValidatorChecks that NS records do not point to targets that are CNAMEs within the same zone. A CNAME target for NS is invalid because resolvers need the actual A/AAAA records to follow the delegation.
- class octodns.zone.ns.MultiValueNsZoneValidator(id, sets=None)[source]
Bases:
ZoneValidatorChecks that all
NSrecords have at least two values. Having multiple name servers is a fundamental best practice for DNS redundancy and availability, both at the apex and for sub-delegations.