Glue records for NS

NSD
1

Hello,

running diagnostic test at http://www.dnssy.com/

It claims

     Glue is not provided by your nameservers. This means they did not
     provide the IP address of your nameservers, so an extra step may be
     required to resolve your domain. The following nameservers did not
     have glue:

     ns3.anetdns.com
     ns2.anetdns.com
     ns1.anetdns.com

     You should add A records for your nameservers into your domain zone
     to fix this.

This is what I have in zone file (before dnssec signing via ldns)

     $ORIGIN tease.email.
     $TTL 3600

     @ IN SOA ( ns1.anetdns.com. admin.deviant.email. 2019011808 14400 3600 1209600 3600 )
                             NS ns1.anetdns.com.
                             NS ns2.anetdns.com.
                             NS ns3.anetdns.com.
     ns1.anetdns.com. A 45.56.122.65
     ns2.anetdns.com. A 173.255.210.222
     ns3.anetdns.com. A 178.79.185.217
     ns1.anetdns.com. AAAA 2600:3c00::f03c:91ff:fe33:ac4b
     ns2.anetdns.com. AAAA 2600:3c01::f03c:91ff:fe33:ddb6
     ns3.anetdns.com. AAAA 2a01:7e00::f03c:91ff:fe18:8a7e

Am I doing it wrong, or is the diagnostic wrong?

2

The diagnostic is wrong:

$ dig ns anetdns.com @ns1.anetdns.com.

; <<>> DiG 9.9.4-RedHat-9.9.4-72.el7 <<>> ns anetdns.com @ns1.anetdns.com.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13779
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 7
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;anetdns.com. IN NS

;; ANSWER SECTION:
anetdns.com. 3600 IN NS ns1.anetdns.com.
anetdns.com. 3600 IN NS ns2.anetdns.com.
anetdns.com. 3600 IN NS ns3.anetdns.com.

;; ADDITIONAL SECTION:
ns1.anetdns.com. 3600 IN A 45.56.122.65
ns2.anetdns.com. 3600 IN A 173.255.210.222
ns3.anetdns.com. 3600 IN A 178.79.185.217
ns1.anetdns.com. 3600 IN AAAA 2600:3c00::f03c:91ff:fe33:ac4b
ns2.anetdns.com. 3600 IN AAAA 2600:3c01::f03c:91ff:fe33:ddb6
ns3.anetdns.com. 3600 IN AAAA 2a01:7e00::f03c:91ff:fe18:8a7e

;; Query time: 38 msec
;; SERVER: 45.56.122.65#53(45.56.122.65)
;; WHEN: Fri Jan 18 10:50:05 EST 2019
;; MSG SIZE rcvd: 226

3

I would say that the implementor of that test service doesn't
understand when glue is required or appropriate.

The diagnostic message seems to recommend gratuitously including
un-necessary (and arguably, inappropriate) glue.

I would recommend using a test service written by people who
really "know their onions", such as zonemaster, which recently
(when I requested it) gave this report on the tease.email zone:

https://zonemaster.fr/result/a829596493000f88

I hope this helps.

Best regards,

Niall O'Reilly