DNS zone
A DNS zone is an administrative unit for DNS data. Its boundaries follow delegation; not every subdomain automatically becomes a separate zone.
What is a DNS zone?
A DNS zone is a contiguous, administered part of the DNS namespace with its associated authoritative DNS data. The IETF describes zones as units of authoritative information and explains their separation through delegation. Authoritative name servers provide the definitive answers for that area.
Example: handing over administration of a subsection
In the fictional design, one team manages the zone studio.example. Another team is to manage its own DNS data for team.studio.example. This subsection is therefore delegated as a separate zone. Appropriate references to the responsible name servers must be configured in the parent area. The names are our own examples, not an executed delegation.
Without such a separation, records for several subdomains may reside in the same zone. Domain and zone therefore do not always cover the same area.
Before a change, it should be clear which zone is affected, who may write there and which servers serve it. A DNS zone does not manage website files or portal permissions; those belong to other services.
Sources
Related terms
- Domain Name SystemDNS supplies data about names, such as a web server’s address. Name resolution, the server connection and application behaviour are separate steps.
- SubdomainA subdomain sits within a parent DNS namespace. It can name a service; its administration and security still need to be planned.
- A recordAn A record maps a DNS name to an IPv4 address. It does not configure the website or define HTTPS, paths or an HTTP redirect.
- Return-PathReturn-Path records the SMTP reverse path in a header. It explains the technical route for error reports, not a person’s identity.
- Envelope-FromEnvelope-From identifies the SMTP sender for transport and error feedback. It must be distinguished from the visible sender address.
- DMARC aggregate reportA DMARC aggregate report summarises a reporting mail system’s domain checks over a period. It helps examine sending sources and misconfigurations.
Articles on this topic
Cloud & Operations with ASES
Hosting, deployment, maintenance and support