Hi Karol. The DNS model is that if a zone contains multiple records of the same type with the same owner name - e.g. google.com/NS <http://google.com/NS> - then all answers are returned in a response to a query: this is known as an RRSET. In the case of NS records, all RRSETs from anywhere must be the same, apart from the order of records in the set, otherwise the view of the DNS hierarchy becomes inconsistent. This is described here: https://datatracker.ietf.org/doc/html/rfc1034#section-2.2
If you use the example you provided, an NS query for google.com currently get these four answers: ;; ANSWER SECTION: google.com. 341515 IN NS ns1.google.com. google.com. 341515 IN NS ns4.google.com. google.com. 341515 IN NS ns3.google.com. google.com. 341515 IN NS ns2.google.com. Note that, depending on how the authoritative server providing those answers has been configured they may be listed in the same order each time or in a random order. So it is not reliable, nor correct anyway, to provide only one of these records based on who is querying. One feature you might want to take a look at is BIND’s GeoIP support, described here: https://bind9.readthedocs.io/en/latest/chapter7.html#access-control-lists here: https://bind9.readthedocs.io/en/latest/reference.html#namedconf-statement-geoip-directory and here: https://kb.isc.org/docs/aa-00971 I hope that helps. Cheers, Greg > On 21 Mar 2025, at 22:16, Karol Nowicki via bind-users > <bind-users@lists.isc.org> wrote: > > Hello Everyone > > Do we have any option to define order of domain delegation depends from query > location ? > > For example > > google.com. NS dns1.company.com. > google.com. NS dns2.company.com. > > All in one zone file. > > Now when client’s query comes from north america then delegates only to dns1, > when query comes from Europe then delegates to dns2 > > > Wysłane z Yahoo Mail do iPhone > <https://mail.onelink.me/107872968?pid=nativeplacement&c=Global_Acquisition_YMktg_315_Internal_EmailSignature&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000604&af_sub5=EmailSignature__Static_> > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
