Information Technology Services
To prevent automated spam submissions leave this field empty.

DNS policy

Domain Name Service (DNS) is an internet service that translates meaningful alphabetic names into numeric IP addresses which are given to computers, services or any resource participating in the Internet. DNS translates hostnames into IP addresses and IP addresses to hostnames. An example is WWW.VANDERBILT.EDU which translates to 129.59.15.60.

This is the current statement on use of Vanderbilt domain name services (which ITS operates for the University) to serve Vanderbilt and certain non-Vanderbilt domain names. Vanderbilt domain names are those registered and owned by Vanderbilt (at large) to represent Vanderbilt's presence in the Internet. Vanderbilt domain names consist of vanderbilt.edu, relevant VU-owned IP network reverse mapping domains, and domains such as vanderbilt.org which have been obtained to protect names associated with Vanderbilt in the Internet domain name space.

DNS Name Servers:

ITS retains official responsibility for maintenance of the top level DNS servers for Vanderbilt University. DNS servers are maintained by system administrators that adhere to University policies and practices related to server administration and security. The DNS servers are highly available (24 hours a day, 7 days a week).

Top Level Domains:

Vanderbilt.Edu is the top level domain.

Sub-Domains:

ATTENTION
New subdomains will no longer be approved as of July 31, 2011 (subdomains that exist prior to July 31, 2011 will be maintained).
Websites are now organized based on official namespace guidelines, which map to large functional units of the university. Exceptions can be made only for compelling business purpose. In a strategic effort to organize the Vanderbilt webspace -- so that content is available under a logical structure -- new websites are to be built under the organization structure that is already in place at the University and Medical Center. (e.g. if you are part of the College of Arts and Science, your website will be as.vanderbilt.edu/yourwebsite); If you are a student organization, your website will be studentorgs.vanderbilt.edu/yourwebsite; If you are part of the Kennedy Center, your site URL will be kc.vanderbilt.edu/yourwebsite. If you are part of the medical center, your website will be mc.vanderbilt.edu/yourwebsite.)

DNS Requests:

DNS Requests must contain a sub-domain name as well as the Vanderbilt.edu top level name. (i.e. ITS.VANDERBILT.EDU) In this case, ITS is the sub-domain and VANDERBILT.EDU is the top level name. DNS requests may be requested at https://its.vanderbilt.edu/dns_iprequest.

DNS Self-Serve:

In order to increase the efficiency of DNS requests, ITS may identify certain departments who are eligible for self-serve DNS. Departments will be identified for self-serve DNS based upon the amount of DNS resource records they possess, the frequency of changes to their resource records, and the pre-existence of DNS sub-domain(s). When identified, authorized users will be granted access to make and modify the DNS resource records applicable to their departments via web interface tools without having to submit requests to ITS. ITS shall provide training for the identified personnel to insure proper resource record maintenance.

  1. Changes to resource records will be published twice daily, once at 6am and again at 6pm. If changes to this schedule are needed, notification must be sent to domain.name.service@vanderbilt.edu with as much prior notification as possible.
  2. Ad-hoc and emergency publishing of DNS resource records modified by authorized departments may be coordinated through the ITS (domain.name.service@vanderbilt.edu) during normal business hours or through the ITS Network Operations Center (noc@vanderbilt.edu) after business hours and on weekends. ITS requests that ad-hoc changes be minimized to maintain the scheduled publication times if at all possible.
  3. Self-Serve DNS authorized departments are responsible for any and all DNS resource record data maintained within the sub-domains and reverse zones allocated to the department. ITS maintains the rights to refuse resource record changes that do not follow the naming convention guidelines stated below.
  4. ITS is not responsible for the modification or loss of data associated with changes made by self-serve DNS authorized departments. ITS may assist in identifying when the data was changed but recreation of the data rests solely with the responsible authorized department.

DNS Sub-Domain Name Server Delegation:

Domain Name Service depends on designated servers having the proper authority to answer for the resource records within the assigned zones/sub-domains. This authority can reside at the top level zone/domain (i.e. Vanderbilt.edu) or selected zones/sub-domains can be delegated to another server performing DNS resolution (i.e. ds.vanderbilt.edu). Once a zone/sub-domain is delegated, that server becomes responsible for the authoritative name resolution of the resources records pertaining to that sub-domain.

It is the intent of ITS to maintain a centralized Domain Name Service authority to maximize security and appropriate Service Level Agreements.

  1. ITS will no longer delegate Sub-Domain Name Server authority.
  2. Existing delegated sub-domains will be allowed to continue operations.
  3. For existing delegated sub-domains, that department is responsible for any and all DNS resource record data maintained within that sub-domain. ITS is not responsible for the integrity of resource records within the delegated sub-domain.
  4. The authorized department is responsible for any Service Level Agreements of resource records contained within the delegated sub-domain. ITS will retain responsibility for root domain and general DNS service outside of the delegated sub-domain.
  5. The responsibility of security for delegated name servers rests solely with the authorized department.
  6. ITS requires that any changes to delegated name servers be communicated at least 3 business days in advance in order to ensure proper forwarding of the sub-domain requests.

DNS Naming Conventions:

  1. DNS names represent the university and should reflect a university, department, service association or school affiliation.
  2. Names must be made in the best interest of the University and must not be offensive in any way.
  3. ITS has the right to refuse any name if it is deemed inappropriate.
  4. Names may also be refused if the requested name may cause confusion about the true purpose of the system.
  5. Only domain name registrations that are clearly noncommercial, not-for-profit, and not for personal benefit are considered.
  6. Domain name registrations must be clearly acceptable to Vanderbilt administration from the point of view of associating the name and purpose with Vanderbilt's supported services.
  7. Domain name registrations should express Vanderbilt's (global) organizational interests.
  8. Domain name registrations should be logically justified in obtaining service in Vanderbilt's domain name service by virtue of employing Vanderbilt's network, Internet connectivity, and (possibly) Vanderbilt owned computer systems for provision of services in the registered domain.

Non-Vanderbilt Domains:

ITS can provide Domain Name Service for University customers that are outside of Vanderbilt.edu instead of relying on the registrar.s DNS servers. Potential advantages of using the ITS DNS servers include ease and speed of resource record change and localized support through the existing ITS support structure. This service can be applied to both existing and newly created non-Vanderbilt Domains.

Basic Information:

Domain name registrations must be explicitly requested by, and registered for the name(s) of appropriate Vanderbilt faculty or administrative staff in their role(s) as Vanderbilt departmental staff in order to maintain proper administrative and billing processes. These Vanderbilt affiliated people and departments are the sponsor(s) of the registering organization's requested use of Vanderbilt's domain name services. The registration should identify the technical contact as the ITS Network Operations Center, via the so-called "NIC handle" (or network identifier), NOC1576-ARIN, in the Network Solutions "WHOIS" database.

The responsible sponsoring person must provide a statement of sponsorship for the requested domain name in Vanderbilt's domain name servers and identify the sponsor's department and role at Vanderbilt. This statement should include assurance of intent to abide by the criteria outlined in this document. (It's suitable to do that by explicit reference to this text as an attachment, or as the ITS "stated criteria for serving a non-VU domain in VU DNS servers".) The statement should also include a short description of the purpose of the requested domain name and of the associated organization, group, or project. The statement should be provided to ITS via the request form at https://its.vanderbilt.edu/dns_iprequest.

If the host is off-site (non-Vanderbilt DNS servers), ITS will not support administration or changes for the off-site service nor will we provide reverse DNS entries or mail exchange configurations. If any of these criteria eventually fail to be met, then a previously justified domain name service registration will be reevaluated for disposal or transfer to another domain name service.

Registering a Non-Vanderbilt Domain Name:

Go here for more details: http://its.vanderbilt.edu/domain_name_policy

Other Policy Compliance Requirements:

All those who use the ITS Domain Name Service are expected to comply with the University.s Acceptable Use Policy. Those individuals and groups must also comply with the University's Trademarks and Licensing policies.

  1. Vanderbilt Acceptable Use Policy
  2. Vanderbilt Trademark Licensing Policy
Last updated: May 31, 2012