Secondary DNS service

As part of the Information Services DNS offerings the Identity and Access group provides a secondary DNS service for organisations and affiliates that run their own authoritative DNS servers. This service provides redundancy for University related domains that are not managed by the central DNS service. (University domains ending in unimelb.edu.au should all be managed centrally via the central IPAM solution)

Who can use this use service

The Manager of the Identity and Access group is the arbitrator over which domains we shall act as secondary DNS servers. A guideline for the types of domains is given in the table below:

Application for secondary DNS listing

Applications for using the secondary DNS service should be made using the online application form.

Requirements of the master DNS servers

There are a few configuration options and requirements that must be met before
we will enable the secondary DNS service for a domain:

• A contact email and phone number must be provided so that important service information can be easily distributed.
• The zone's master server must allow zone transfers from:
  128.250.20.2
  128.250.144.180
  
  for BIND's named configuration file this is done with:
  
  allow-transfer { 128.250.20.2; 128.250.144.180; };
• The zone's NS records must include the following servers:
  ns1.unimelb.edu.au
  ns2.unimelb.edu.au
• The zone's SOA record must include a valid contact email address

A sample zone file for the hypothetical research_group.org.au domain with the required configuration can be found below.