NSEC resource record is one of the resource records included in the DNS security extension mechanism (DNSSEC). This record is used to provide authenticated denial of existence of a resource record in response to a resolver query.
NSEC resource records are defined in RFC 4034.
NSEC records are automatically generated upon the signing of an authoritative zone.
The name part of a DNS NSEC object reference has the following components:
- The name of the record.
- The name of the view.
Example: record:nsec/ZG5zLmJpsaG9zdA:us.example.com/default.external
References to record:nsec are object references.
The object does not support the following operations:
The object cannot be managed on Cloud Platform members.
These fields are actual members of the object; thus, they can be requested by using _return_fields, if the fields are readable.
The basic version of the object contains the field(s): name, view.
Structure containing all cloud API related information for this object.
Type
A/An Cloud Information struct.
Search
The field is not available for search.
Notes
The cloud_info cannot be updated.
cloud_info cannot be written.
Time that the record was created.
Type
Timestamp.
Search
The field is not available for search.
Notes
The creation_time cannot be updated.
creation_time cannot be written.
Creator of the record.
Type
String.
Search
The field is available for search via
Notes
The creator cannot be updated.
creator cannot be written.
Name for an NSEC record in punycode format.
Type
String.
Values with leading or trailing white space are not valid for this field.
Search
The field is not available for search.
Notes
The dns_name cannot be updated.
dns_name cannot be written.
Name of the next owner in punycode format.
Type
String.
Search
The field is not available for search.
Notes
The dns_next_owner_name cannot be updated.
dns_next_owner_name cannot be written.
The time of the last DNS query in Epoch seconds format.
Type
Timestamp.
Search
The field is not available for search.
Notes
The last_queried cannot be updated.
last_queried cannot be written.
The name of the NSEC record in FQDN format.
Type
String.
Search
The field is available for search via
Notes
The name is part of the base object.
The name cannot be updated.
name cannot be written.
Name of the next owner that has authoritative data or that contains a delegation point NS record.
Type
String.
Search
The field is available for search via
Notes
The next_owner_name cannot be updated.
next_owner_name cannot be written.
The RRSet types that exist at the original owner name of the NSEC RR.
Type
String array.
Search
The field is not available for search.
Notes
The rrset_types cannot be updated.
rrset_types cannot be written.
The Time To Live (TTL) value for the record. A 32-bit unsigned integer that represents the duration, in seconds, for which the record is valid (cached). Zero indicates that the record should not be cached.
Type
Unsigned integer.
Search
The field is not available for search.
Notes
ttl is associated with the field use_ttl (see use flag).
The ttl cannot be updated.
ttl cannot be written.
Use flag for: ttl
Type
Bool.
Search
The field is not available for search.
Notes
The use_ttl cannot be updated.
use_ttl cannot be written.
The name of the DNS View in which the record resides. Example: “external”.
Type
String.
Values with leading or trailing white space are not valid for this field.
Search
The field is available for search via
Notes
The view is part of the base object.
The view cannot be updated.
view cannot be written.
The name of the zone in which the record resides. Example: “zone.com”. If a view is not specified when searching by zone, the default view is used.
Type
String.
Values with leading or trailing white space are not valid for this field.
Search
The field is available for search via
Notes
The zone cannot be updated.
zone cannot be written.
| Field | Type | Req | R/O | Base | Search |
|---|---|---|---|---|---|
| cloud_info | struct | N | Y | N | N/A |
| creation_time | Timestamp | N | Y | N | N/A |
| creator | String | N | Y | N | = |
| dns_name | String | N | Y | N | N/A |
| dns_next_owner_name | String | N | Y | N | N/A |
| last_queried | Timestamp | N | Y | N | N/A |
| name | String | N | Y | Y | : = ~ |
| next_owner_name | String | N | Y | N | : = ~ |
| rrset_types | [String] | N | Y | N | N/A |
| ttl | Unsigned int | N | Y | N | N/A |
| use_ttl | Bool | N | Y | N | N/A |
| view | String | N | Y | Y | = |
| zone | String | N | Y | N | = |
record:ns : DNS NS record object.
