We have a VPN with multiple search domains. One component of these domains specifies the country in which the hosts are located.
servers.fr.internal.example.org.
contains all the servers in France.servers.ca.internal.example.org.
contains all the servers in Canada.
The configured list of search domains is:
internal.example.org.
I've found multiple references to Partially Qualified Domain Names (PQDNs), but all the examples only show PQDNs as hostnames. I'm wondering if the DNS protocol/most widely deployed resolvers allow for PQDNs with multiple labels, i.e. foo.servers.ca
.
I've tried this on my local machine macOS 10.13.6 and it doesn't appear to work, I just get NXDOMAIN.
Should this work? Is there a special format for PQDNs with multiple labels? I understand this works fine on other systems (Linux, Windows).
This is very normal inside a DNS zone. A FQDN inside DNS always ends with a full stop (
.
) If a domain name does not end with a full stop then it has the current zone appended to the end of it.The reason you cannot do this via
dig
ornslookup
is because the convention of searching for PQDN's differs depending on the tool you're using and even its configuration. For example, enabling dns devolution on Windows makesnslookup
behave very differently to, say,dig
on Linux.