<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi,<br>
<br>
as the root zone is supporting AXFR/IXFR and in order not only to
mitigate the amount of upstream queries to authoritative servers and
speed up lookups but also to enhance privacy for client queries I am
facilitating queries for delegated TLDs via <u><b>auth-zone:</b></u>.<br>
<br>
What I am struggling with is <b><u>name:</u></b>, particularly
understanding:<br>
<blockquote type="cite">
<pre class="man">pertaining to that part of the namespace. The authority zone with the name closest to the name looked up is used.</pre>
</blockquote>
<br>
With the root zone containing various delegated TLD namespaces
(<a class="moz-txt-link-freetext" href="https://www.iana.org/domains/root/dB">https://www.iana.org/domains/root/dB</a>) I am not sure what <b><u>name:</u></b>
is supposed to be in order to resolve SLD of a delegated TLD's?<br>
<br>
Tried <b><u>name: .</u></b><b> </b> and then ran dig from the cli,
utilizing the local copy of the root zone (transfer worked and <b><u>zonefile:</u></b>
is present), but the SLD of the delegated TLD does not resolve,
e.g.:<br>
<br>
<blockquote type="cite"># dig bbc.com<br>
<br>
; <<>> DiG 9.11.2-P1 <<>> bbc.com<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
11708<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13,
ADDITIONAL: 27<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags:; udp: 4096<br>
;; QUESTION SECTION:<br>
;bbc.com. IN A<br>
<br>
;; AUTHORITY SECTION:<br>
com. 172800 IN NS
i.gtld-servers.net.<br>
com. 172800 IN NS
j.gtld-servers.net.<br>
com. 172800 IN NS
k.gtld-servers.net.<br>
com. 172800 IN NS
l.gtld-servers.net.<br>
com. 172800 IN NS
m.gtld-servers.net.<br>
com. 172800 IN NS
a.gtld-servers.net.<br>
com. 172800 IN NS
b.gtld-servers.net.<br>
com. 172800 IN NS
c.gtld-servers.net.<br>
com. 172800 IN NS
d.gtld-servers.net.<br>
com. 172800 IN NS
e.gtld-servers.net.<br>
com. 172800 IN NS
f.gtld-servers.net.<br>
com. 172800 IN NS
g.gtld-servers.net.<br>
com. 172800 IN NS
h.gtld-servers.net.<br>
<br>
;; ADDITIONAL SECTION:<br>
a.gtld-servers.net. 172800 IN A 192.5.6.30<br>
a.gtld-servers.net. 172800 IN AAAA
2001:503:a83e::2:30<br>
b.gtld-servers.net. 172800 IN A 192.33.14.30<br>
b.gtld-servers.net. 172800 IN AAAA
2001:503:231d::2:30<br>
c.gtld-servers.net. 172800 IN A 192.26.92.30<br>
c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30<br>
d.gtld-servers.net. 172800 IN A 192.31.80.30<br>
d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30<br>
e.gtld-servers.net. 172800 IN A 192.12.94.30<br>
e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30<br>
f.gtld-servers.net. 172800 IN A 192.35.51.30<br>
f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30<br>
g.gtld-servers.net. 172800 IN A 192.42.93.30<br>
g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30<br>
h.gtld-servers.net. 172800 IN A 192.54.112.30<br>
h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30<br>
i.gtld-servers.net. 172800 IN A 192.43.172.30<br>
i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30<br>
j.gtld-servers.net. 172800 IN A 192.48.79.30<br>
j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30<br>
k.gtld-servers.net. 172800 IN A 192.52.178.30<br>
k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30<br>
l.gtld-servers.net. 172800 IN A 192.41.162.30<br>
l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30<br>
m.gtld-servers.net. 172800 IN A 192.55.83.30<br>
m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30<br>
<br>
;; Query time: 0 msec<br>
;; SERVER: 127.0.0.1#53(127.0.0.1)<br>
;; WHEN: Sat Oct 27 22:01:57 CEST 2018<br>
;; MSG SIZE rcvd: 832</blockquote>
<br>
<br>
The unbound log (verbose level 4) reports:<br>
<br>
<blockquote type="cite">info: auth_zone . query bbc.com. A, domain
ns.amarshallinc.com. notexact notexist, ce com., rrset NS</blockquote>
<br>
What am I missing?<br>
<br>
---<br>
<br>
On another note - with root-hints already in place I was wondering
whether the same file can be utilized for <b><u>master:</u></b>? It
seems redundant having to state instead:<br>
<br>
<blockquote type="cite"> master: 198.41.0.4<br>
master: 199.9.14.201<br>
master: 192.33.4.12<br>
master: 199.7.91.13<br>
master: 192.203.230.10<br>
master: 192.5.5.241<br>
master: 192.112.36.4<br>
master: 198.97.190.53<br>
master: 192.36.148.17<br>
master: 192.58.128.30<br>
master: 193.0.14.129</blockquote>
<br>
Notwithstanding that whilst root-hints can be automatically updated
periodically such does not work in the auth-zone, or does it and I
just missed it?<br>
</body>
</html>