What is a DNS zone?
DNS zone is a delegated partition of the Domain namespace, container of DNS settings and DNS records inside a DNS zone file. The DNS records point domain names to IP addresses, show information about services, serve for verification and authentication purposes and more.
The DNS namespace can have single or multiple DNS zones, each managed by a particular DNS host/service. It has a hierarchy structure where the top is the root level, followed by the top-level domain, domain, subdomain, etc. This division helps for administrative purposes. It decentralizes the DNS, making it possible to be managed on different levels, and also reduces the tasks of nameservers by dividing their responsibilities. It is like an enormous pie. Each piece of it allows better separation of the administrative load and helps with redundancy.
There are two types of DNS zones – Primary (Master) DNS zone for control and Secondary (Slave) DNS zone for redundancy and better performance.
The first contains all the original DNS records, and the second gets them from the Primary DNS zone. The process is called DNS zone transfer. The Primary DNS server could push it, or the secondary can get the changes when its cache expires.
Don’t directly associate a DNS zone with a specific domain. A DNS zone may contain single or multiple host names for the same domain; the important thing is that it is used for controlling a fraction of the namespace. DNS zones can be on the same servers too.
We also recommend that you read “What is Authoritative DNS server?“
Different types of DNS zones
There are different types of DNS zones, but in this article, we will set our eyes on just two:
- Primary (Master) DNS zone – holder of the original zone file (all the DNS records for the zone). You can manage a host through this zone.
- Secondary (Slave) DNS zone – holds a copy of the zone file. You can use them for better performance, for hiding your Primary, for backup and redundancy.
Primary DNS zone
Primary (Master) zones, contain a read/write copy of the zone data. There could be only one Master zone on one DNS server at a time. All the DNS records added manually or automatically, are written in this Primary zone of the DNS server.
The data is stored in a standard text file – .txt. The advantage is that it is easy to back it up and to recover in case of problems.
Something essential is that to be able to make changes to the DNS zone, the Primary zone must be available. If the server with your Primary DNS is down, you won’t be able to make any changes.
If you want to have redundancy, you must have the zone data accessible on multiple servers.
If you want to learn how to create a Primary zone in ClouDNS, check the following step-by-step tutorial:
- Click on the sign-in button and enter your email address and your password. Once you have logged in, you will see your Dashboard. From the list, you will notice that you do not have any registered DNS zones.
- Click on the “Add new” button. In the pop-up window, click on “Master zone”. You can create your DNS zone with the NS records you want. However, we recommend you to use the suggested ones.
If you want to check your domain’s NS records, we recommend you take a look at the second command from our article: 10 Most used Dig commands
- In the text field, enter your domain name without HTTP, HTTPS, or WWW. Example: yourdomain.com. Once you do it, click on the “CREATE” button.
You have successfully created your Primary (Master) zone. From the top menu, you will be able to manage your Master DNS zone with all of the available options. Here you will see all the DNS records you can create and use for your needs. From the list, you can see your hostname, the type of the record, where they are pointed to, and what the TTL is.
You can also check our wiki page about Master DNS zone.
Secondary DNS zone
The Secondary DNS zone is a read-only copy of the zone data. Most of the times Secondary (Slave) zones are copies of Master zones. They can also be copies of other Slave zones or Active Directory Zones.
If you try to change a DNS record on a Secondary zone, it can redirect you to another zone with read/write access. By itself, it can’t change it.
One of the primary purposes of a Slave zone is to serve as a backup. When the Primary zone is down, it can still answer requests for the zone from its copy.
Check the following step-by-step tutorial to learn how to create a Secondary (Slave) Zone in ClouDNS.
- Click on the sign-in button and enter your email address and your password.
- Once you have logged in, you will see your Dashboard. From the list, you will notice that you do not have any registered DNS.
- Click on the “Add new” button and then click on “Slave/Backup zone”
- In the first field, enter your domain name without HTTP, HTTPS, or WWW. Example: yourdomain.com. In the second field, on the right, add the IP address of your Master Server. Once you do it, click on the “Add Slave” button.
You have successfully created your Secondary (Slave) zone. From the top menu, you will see the available options for your Slave Zone. Here is also the IP address of your Primary Server.
If you want to use Secondary DNS zones, you can also review our Secondary DNS page, and decide which of our premium plans is right for you.
Now you know what a DNS zone is and the difference between these two types – Primary DNS zone and Secondary DNS zone. For any additional questions about your DNS infrastructure, you can contact our customer support.
DNS Zone VS. Domain
In the domain namespace, the biggest difference between the domains and zones is that domains provide logical structure, and the zones provide an administrative structure.
A domain is a subtree of the domain namespace. It shares its name with that of the top-most node, like yoursite.eu (eu domain). It could be divided into various zones that can be controlled separately.
A zone is a partition of the domain namespace that requires a Primary nameserver and can be managed separately. A zone can coincide with the domain and covers all of its subdomains, or it could be just a partition of the domain. You could have separate zones for mail.yoursite.com and ftp.yoursite.com for your domain yoursite.com.