Addition of DS Record of delegated SubDomain from google cloud DNS to registrar

Google Cloud Compute Infrastructure
1

We purchased Google Workspace and GCP, couple of years back where domain purchase was from google.

Post one year purchased google domain auto migrated to square space registrar.

Now our Root/Apex domain zone file (NS server) is held with registrar (squarespace) and it also with google cloud DNS .

However we are creating delegated SubDomain for our new department “subdomain.example.com” using cloud DNS service, which belongs to our GCP project billing. As per Cloud DNS instruction, we should add two entries in Root/Apex domain zone file (i.e NS records and DS record for delegated SubDomain ). However our registrar does not seems to have DS records addition options for SubDomain . After several follow-up no clue on where that conversation heading. Any help in this regards appreciated.

We intend to use cloud DNS services with many delegated SubDomain to catering to our upcoming web needs.

Currently when we run DNSSEC debug tool we see below error.

No DS records found for subdomain.example.com in the example.com zone

2

Hi @Rajesha_Kini ,

Welcome to Google Cloud Community.

You mentioned your zone file is “with registrar (squarespace) and it also with google cloud DNS.” A domain can only have one active set of authoritative name servers at a time. The DS record issue stems from a limitation at your parent domain’s DNS Host.

Squarespace may not be able to support the delegated subdomain. Google Cloud DNS is a perfect alternative to support adding DS records for delegated subdomains. Here’s a guide on adding a DS record for a delegated subdomain using Google Cloud DNS.

To check who actually managing the DNS for your root domain, run the following command on your terminal:

dig NS <domain name>

if your domain’s DNS is managed by Squarespace, follow the steps below, if it is in Google Cloud DNS proceed to step 4.

  1. Create a managed public zone

  2. Zone type: Public

  3. Zone name: Descriptive name for your own use (E.g., my-new-zone)

  4. DNS name: The domain that you purchased. (E.g., example.com)

  5. DNSSEC: ON. This is required for chain of trust and automatically displays the DS record for your parent domain.

  6. Migrate your existing DNS records

  7. Recreate every essential records (E.g., A records, CNAME, MX records, etc)

  8. Update Nameservers at your Domain Registrar

  9. Replace your current nameservers at Squarespace with 4 Google Cloud nameservers (E.g., ns-cloud-b1.googledomains.com., ns-cloud-b2.googledomains.com.)

  10. Add the NS records to delegate the subdomain on the Parent Zone.

  11. DNS name: fullname of your subdomain (E.g., subdomain.example.com)

  12. Record type: NS

  13. Nameservers: enter the nameservers of your subdomain.

  14. Add the DS record to secure the delegation.

  15. DNS name: fullname of your subdomain (E.g., subdomain.example.com)

  16. Record type: DS

  17. Copy the DS record from the dialog.

For more detailed information on migrating to Google Cloud DNS you may contact Google Cloud Support.

3

Thanks, Kensan, We will follow your instruction to ease the integration.

However, wanted to note one thing, following above steps makes us now to own root zone DNS as well ourself. We were earlier thinking keep root zone with registrar, add delegated zone ourself (billed for us). As we saw other registrar supporting DS record update to their root zone file.

We are good for now with your suggestion.