RRSet of type CNAME with DNS name foo.com. is not permitted at apex in zone bar.com

by

As per RFC1912 section 2.4:

 A CNAME record is not allowed to coexist with any other data.  In
 other words, if suzy.podunk.xx is an alias for sue.podunk.xx, you
 can't also have an MX record for suzy.podunk.edu, or an A record, or
 even a TXT record.  Especially do not try to combine CNAMEs and NS 
 records like this!:

           podunk.xx.      IN      NS      ns1
                           IN      NS      ns2
                           IN      CNAME   mary
           mary            IN      A

The RFC makes perfect sense as the nameserver wouldn’t know whether it needs to follow the CNAME or answer with the actual record the CNAME overlaps with. bar.com is a zone therefore it implicitly has an SOA record for the bar.com name. You can’t have both a SOA record and a CNAME with the same name.

However, given that SOA records are generally used only for zone maintenance, these situations where you want to provide a CNAME at the zone’s apex are quite common. Even though the RFC prohibits it, many engineers would like a behaviour such as: “follow the CNAME unless the query explicitly asks for the SOA record”. That’s why Route 53 provides alias records. These are a Route 53 specific feature which offer the exact functionality you require. Have a look at http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingAliasRRSets.html

More Related Contents:

  1. Amazon AWS Route 53 Hosted Zone does not work
  2. Serving a multitude of static sites from a wildcard domain in AWS
  3. Deleted Route 53 hosted zone, can’t correctly create it again
  4. CloudFront + S3 Website: “The specified key does not exist” when an implicit index document should be displayed
  5. AWS Elastic Beanstalk, running a cronjob
  6. Redshift. Convert comma delimited values into rows
  7. “UNPROTECTED PRIVATE KEY FILE!” Error using SSH into Amazon EC2 Instance (AWS)
  8. Add Keypair to existing EC2 instance
  9. Amazon products API – Looking for basic overview and information
  10. Nginx proxy Amazon S3 resources
  11. connecting AWS SAM Local with dynamodb in docker
  12. Append data to an S3 object
  13. Can I have a route53 subdomain in a different Hosted Zone?
  14. Supporting HTTPS URL redirection with a single CloudFront distribution
  15. How to look for updated rows when using AWS Glue?
  16. Proper access policy for Amazon Elastic Search Cluster
  17. Is there a way to list all resources in AWS
  18. How list Amazon S3 bucket contents by modified date?
  19. Fetching AWS instance metadata from within Docker container?
  20. What is difference between Lightsail and EC2? [closed]
  21. Does an Application Load Balancer support WebSockets?
  22. Sending html content in AWS SNS(Simple Notification Service) emails notifications
  23. Deploying to multiple AWS accounts with Terraform?
  24. How do you search an amazon s3 bucket?
  25. Specify log group for an AWS lambda?
  26. SSL CERTIFICATE_VERIFY_FAILED in aws cli
  27. AWS Difference between a snapshot and AMI
  28. How do I delete a versioned bucket in AWS S3 using the CLI?
  29. connect to AWS IoT using web socket with Cognito authenticated users
  30. Initial setup of terraform backend using terraform

Leave a Comment