FR: Validate Glue Records

[ondohotola]

I have just scratched the surface of dnscontrol, using Bind9, which is very useful, and find it does not squeal if I use an in-bailiwick name server without the corresponding glue record.

Being opinionated ;-)-O should dnscontrol not flag those, like it does for missing periods in a FQDN?

[tlimoncelli]

Thanks for the suggestion! Validating glue records (or at least warning if they are missing) is something that could be added to pkg/normalize/validate.go

[ondohotola]

Thank you, that would be very cool.

[tlimoncelli]

Can you describe, in technical terms, the validation checks it should do?

[ondohotola]

I am only using bind by the way and will also try it on Knot DNS.

If a name server is in-bailiwick at the very least it should check that the IP address is there and issue at least a warning about the glue record needing to be checked in the parent zone.

Ideally would be a lookup in the parent zone like Zonemaster does and the two IP addresses should be compared, but that will slow things down to timeout if the glue record in the parent zone can 't be found.