DNS behavior and evidence

Background for the setup and operational tasks linked from the DNS overview. Each page links to the corresponding configuration or procedure.

• DNSSEC

  Why every zone is signed automatically, and what needs your action versus CNX's.

• CNAME flattening

  How CNAME flattening makes alias targets usable at the zone apex and can remove an additional DNS lookup from any configured alias.

• The compliance evidence package

  What's in the daily compliance evidence package and why it exists.

• In-bailiwick nameservers

  Why in-bailiwick nameservers require glue records, and how glue removes an otherwise separate nameserver-address lookup from the cold DNS path.