Can I use GTM only as an authoritative DNS server?
Short answer
Yes; intelligent routing is not mandatory, and with domains and records defined, GTM works like a classic authoritative DNS server. The domain is left in the Standalone mode; when the HC condition of the addresses stays at the default Static and Balance Algorithm is All Records (this value is also used when the field is left empty), every query is answered with all the addresses in the record. Zone transfer to secondary DNS servers is provided with Slave Server IPs, and signed answers with DNSSEC. When health-aware answers and topology are needed, they are turned on later in the same records.
How Does It Work?
- A DNS Service is created with the Frontend IP and port (default 53) it will listen on; queries are served over UDP and TCP.
- A domain is added to the service; an SOA record is created for the domain automatically (SOA Format determines how the serial number will advance).
- A, AAAA, CNAME, MX, TXT, NS and other records are added from the Records tab, or transferred in bulk from an existing server with Zone Transfer.
- At the domain name provider, the NS records are updated to point to TR7's DNS Service address; this step is done outside TR7.
In TR7
| Need | Counterpart in TR7 |
|---|---|
| NS records of the domain | Added in the Records tab with the NS type; only the SOA record is created automatically |
| Secondary (slave) DNS servers | The domain's Slave Server IPs list: zone transfer permission is given to these addresses, and a NOTIFY is sent at every change |
| DNSSEC | DNSSEC is turned on in the domain; the DS Records to be published in the parent zone are seen from the DNSSEC lock in the list |
| Continuing to keep the records on another DNS server | The records are pulled from that server with Express Profiles (DNS Integration) |
| Resolution of names for which the service is not authoritative | Done only if a DNS Forwarder Profiles profile is assigned to the service |
Common Misconceptions
- "Authoritative DNS requires Remote Devices or a health check." In the Standalone mode and with Static addresses, neither is needed.
- "GTM resolves all DNS queries of the clients." The service answers only for its own domains; for other names, a DNS Forwarder must be assigned (What is the DNS Forwarder; what happens to queries GTM is not authoritative for?).
- "NS records are created automatically when the domain is added." Only the SOA record is created automatically; NS records are added manually.
How it is done in the documentation
