Tutorial - Using Zonemaster
OVHcloud is providing you with services for which you are responsible, with regard to their configuration and management. You are therefore responsible for ensuring they function correctly.
This guide is designed to assist you in common tasks as much as possible. Nevertheless, we recommend that you contact a specialist service provider and/or discuss the issue with our community if you face difficulties or doubts. You can find more information in the Go further section of this guide.
Objective
Zonemaster is a tool created through the collaboration between AFNIC (the French registry) and The Swedish Internet Foundation (the Swedish registry). It lets you analyse the DNS (Domain Name System) configuration of a domain name and identify the elements that can be improved or corrected.
For a better understanding of the DNS concept, please refer to our guide “Everything you need to know about DNS zone”.
Requirements
- Have a domain name
Instructions
Input field
The Zonemaster tool lets you check a DNS configuration already in place on a domain name, or test a DNS zone preconfigured on future DNS servers.
To check the current configuration of a domain name, enter your domain name then click Run test
To check a DNS configuration that you have prepared but not yet applied to the domain name concerned, tick the Options box, then enter the following information:
- Name servers: enter the details of the name server associated with a domain name. Click the
+to add an additional name server. Entering an IP address is optional. - Delegation Signer (DS record): as part of DNSSEC protection, enter the details of the DS record. Click the
+to add an additional DS record. If the DNS servers do not use the DNSSEC protocol, you can leave these fields empty. In the case of a zone signed with DNSSEC, this function lets you check that the zone works correctly with a validating resolver, using the DS records you are about to publish, prior to their publication.
You can also force the checks on a specific IP protocol, via the Disable IPv6 and Disable IPv4 boxes
Example:
You are the holder of the domain name “domain.tld”, which currently uses the DNS servers “dnsXX.ovh.net” and “nsXX.ovh.net”.You have configured a DNS zone for this domain name on the DNS servers “dns1.test.tld” and “dns2.test.tld”.
Before changing the DNS servers, you can perform an advanced search using theOptionsbox by entering “dns1.test.tld” and “dns2.test.tld” in theName serversboxes.
Zonemaster will run a test as if you were using the servers “dns1.test.tld” and “dns2.test.tld” on “domain.tld”.
When you enter a domain name and click the Fetch NS from parent zone and Fetch DS from parent zone buttons, the DNS servers associated with the domain name will appear, along with the details of the DS record (DNSSEC) if one has been configured.
Result
Once the form has been submitted, the results are displayed in groups of tests. The tests are sorted by severity level.
- Error: this part shows errors or missing elements that may cause a malfunction.
- Warning: this part is functional but deserves particular attention. The tool has detected that a parameter does not meet the standard of its category, without this blocking its operation.
- Notice: this is simply information, with no particular consequence on the operation of the domain name.
- Info: this part is functional and meets the standard criteria in its category.
For each test, it is possible to obtain more details, for example to understand the error in the event of a malfunction, or simply for information.
Useful information
If you have any further questions about Zonemaster, refer to the FAQ section on https://zonemaster.net/.
Go further
Everything you need to know about DNS servers.
Protect your domain name against Cache Poisoning with DNSSEC.
For specialised services (SEO, development, etc.), contact OVHcloud partners.
If you would like assistance using and configuring your OVHcloud solutions, please refer to our support offers.
Join our community of users