What are the options and considerations for pointing an SFMC email subdomain to multiple NS servers?

Summary

Configuring an SFMC email subdomain with multiple NS servers presents several options and considerations. SFMC requires delegation of a subdomain to their NS records, necessitating updating NS records at the domain registrar. If the hosting provider cannot support multiple NS servers, options include self-hosting DNS or dedicating an entire domain, though the latter is often suboptimal. Delegation to SFMC (or another ESP) allows them to manage complex DNS settings, including SPF, DKIM, DMARC, and newer features like BIMI, simplifying configuration and enabling automatic updates. However, delegating requires trusting the ESP's security practices. Self-hosting, while offering control, can be complex and error-prone. A robust DNS infrastructure with correctly set up NS records is vital for sender authentication, IP warming, and overall deliverability. It's important to verify DNS configuration after setup. Remember that DNS record changes may take up to 48 hours to propagate, so monitoring is essential. Properly configured authentication (SPF, DKIM, DMARC) after nameserver updates is crucial. Delegating to a subdomain isolates deliverability issues, protecting the main domain's reputation. If unable to set up multiple NS, domain migration should be considered.

Key findings

  • SFMC Requirement: SFMC and other ESPs often require subdomain delegation to their NS records for email sending.
  • Hosting Limitations: Some hosting providers may not support multiple NS records for a subdomain, necessitating alternative solutions.
  • Delegation Benefits: Delegation simplifies DNS management and enables ESPs to evolve settings with new features.
  • Security Risks: Delegating DNS involves trusting the security practices of the ESP.
  • Self-Hosting Complexity: Self-hosting DNS requires expertise and can be error-prone.
  • DNS Importance: A solid DNS setup is foundational for email deliverability, authentication, and IP warming.
  • Domain Isolation: Subdomain delegation protects the main domain's reputation from email deliverability issues.

Key considerations

  • Hosting Capabilities: Verify if your hosting provider supports multiple NS records for the subdomain.
  • Security Assessment: Thoroughly evaluate the security practices of the ESP before delegating DNS control.
  • Technical Expertise: Assess your team's technical capabilities for managing DNS records accurately if self-hosting.
  • Propagation Time: Account for the potential 48-hour DNS propagation time when making NS record changes.
  • Verification: Verify DNS configuration using online tools after setting up NS records.
  • SFMC Instructions: Follow SFMC's specific instructions for setting up NS records and delegating the subdomain.
  • Authentication Protocols: Ensure SPF, DKIM, and DMARC records are correctly configured for the delegated subdomain.
  • Domain Dedication Costs: Avoid dedicating the whole domain to SFMC due to cost inefficiencies if possible.

What email marketers say
10Marketer opinions

Configuring an SFMC email subdomain with multiple NS servers involves several options and considerations. Delegating the subdomain to SFMC's NS records allows SFMC to manage DNS settings for optimal deliverability, including SPF, DKIM, and DMARC. However, brands should be aware of potential security risks involved in delegating responsibility to a third-party vendor, and should evaluate the ESP's security practices. Some hosting providers might have limitations on the number of NS records allowed, necessitating alternatives like self-hosting DNS or using a dedicated domain. Correct DNS configuration is crucial for IP warming and sender reputation. After setup, DNS configuration needs to be verified. Ensuring SPF, DKIM, and DMARC are correctly configured is vital. Delegating to a subdomain helps protect the main domain's reputation, and if your hosting provider does not allow pointing to multiple NS, consider switching providers.

Key opinions

  • Delegation Benefits: Delegating to SFMC allows them to manage DNS records for optimal deliverability.
  • Security Risks: Delegating to a third party requires trusting their security practices.
  • Hosting Limitations: Some hosting providers may limit the number of NS records.
  • IP Warming: Correct DNS configuration is part of an IP warming strategy.
  • Reputation Protection: Subdomain delegation protects the main domain's reputation.
  • SPF/DKIM/DMARC Importance: Ensure SPF, DKIM, and DMARC are correctly configured for deliverability.

Key considerations

  • Security Assessment: Evaluate the security practices of the ESP before delegating the subdomain.
  • Hosting Capabilities: Confirm your hosting provider allows multiple NS records for the subdomain.
  • Alternative Options: Consider self-hosting DNS or using a dedicated domain if NS record limitations exist.
  • DNS Verification: Verify the DNS configuration after setup to ensure correct propagation and resolution.
  • Reputation Impact: Understand how delegating to a subdomain isolates deliverability issues.
  • Authentication Validation: Confirm that SPF, DKIM and DMARC are configured correctly for the subdomain.
Marketer view

Email marketer from Email Geeks suggests brands should keep their subdomains in their scope rather than delegate the responsibility. He highlights potential security risks with vendor delegation.

March 2024 - Email Geeks
Marketer view

Email marketer from NeilPatel.com shares that when setting up subdomains for email, it's crucial to ensure your DNS records (NS, A, MX, SPF, DKIM, DMARC) are correctly configured. NS records ensure the subdomain is properly delegated to the email sending service.

April 2024 - NeilPatel.com
Marketer view

Email marketer from Litmus.com shares that ensuring SPF, DKIM and DMARC are correctly setup is a key aspect of domain delegation. After updating nameservers, validating your authentication helps ensure reliable deliverability.

November 2024 - Litmus.com
Marketer view

Email marketer from SparkPost.com shares that pointing your email subdomain to multiple NS servers is part of an IP warming strategy. Having the correct DNS setup helps establish your sender reputation.

February 2024 - SparkPost.com
Marketer view

Email marketer from Gmass.co states that delegating to a subdomain helps protect the main domain's reputation. Should the subdomain suffer deliverability issues, the core website and email infrastructure remain unaffected.

August 2023 - Gmass.co
Marketer view

Email marketer from Mailgun.com explains that delegating a subdomain to an email service provider's NS records allows the provider to manage the DNS settings required for optimal deliverability, including SPF, DKIM, and DMARC. This simplifies the configuration process for the sender.

December 2024 - Mailgun.com
Marketer view

Email marketer from Reddit shares that some hosting providers might have limitations on the number of NS records allowed for a subdomain. In such cases, alternatives like self-hosting the DNS or using a dedicated domain might be necessary.

May 2021 - Reddit
Marketer view

Email marketer from StackExchange highlights that delegating a subdomain to a third-party email service requires trusting them with your DNS zone. Evaluate the security practices of the ESP before delegating.

November 2021 - StackExchange
Marketer view

Email marketer from EmailToolTester.com advises that after setting up NS records and delegating your subdomain, verify the DNS configuration using online tools to ensure the records have propagated correctly and are resolving as expected.

January 2023 - EmailToolTester.com
Marketer view

Email marketer from Sendinblue.com mentions if your hosting provider will not allow you to point a subdomain to multiple nameservers then you should look into other options. One option is to move the domain to another provider that allows this functionality.

January 2022 - Sendinblue.com

What the experts say
5Expert opinions

When setting up an SFMC email subdomain, if the hosting provider can't handle multiple NS servers, self-hosting or dedicating a whole domain are options, though dedicating a domain is suboptimal. Delegation to the ESP allows them to manage DNS settings, including newer features like DKIM, DMARC, and BIMI. However, self-hosting DNS can be complex and prone to errors. A solid DNS infrastructure with correct NS record setup is essential for sender authentication and deliverability. Carefully consider whether to self-host or delegate, ensuring the chosen method is set up correctly to avoid deliverability issues.

Key opinions

  • Hosting Limitations: Some hosting providers might not support multiple NS servers for a subdomain.
  • Delegation Benefits: Delegation allows ESPs to manage complex DNS settings and evolve them with new features.
  • Self-Hosting Challenges: Self-hosting DNS can be complex and error-prone.
  • DNS Importance: A solid DNS infrastructure is foundational for email deliverability.
  • Domain Dedication Drawbacks: Dedicating a whole domain solely to SFMC is suboptimal as the domain cannot be used for anything else.

Key considerations

  • Hosting Capabilities: Verify if your hosting provider supports multiple NS servers.
  • Self-Hosting Expertise: Assess your team's expertise in managing DNS records accurately if self-hosting.
  • Delegation Trust: Consider the implications of trusting a third-party ESP with your DNS settings.
  • DNS Setup Accuracy: Ensure the chosen DNS setup method (self-hosted or delegated) is configured correctly.
  • Alternative Options: Explore all options (dedicated domain, provider migration) if multiple NS records cannot be set up.
Expert view

Expert from Email Geeks explains that self-hosting can be difficult due to the number of DNS entries required and potential errors by IT when setting it up.

March 2023 - Email Geeks
Expert view

Expert from Email Geeks explains that delegation allows providers to evolve subdomain settings as new features emerge, like DKIM keys, DMARC settings, and BIMI.

February 2022 - Email Geeks
Expert view

Expert from Spam Resource responds that a solid DNS infrastructure is foundational for email deliverability. It explains that correctly setting up NS records for your email subdomains is crucial for sender authentication and reputation.

March 2021 - Spam Resource
Expert view

Expert from Word to the Wise explains the importance of carefully considering whether to self-host your DNS or delegate it to your ESP, and to ensure that your chosen method is set up correctly, as improper set up will negatively affect delivery.

January 2023 - Word to the Wise
Expert view

Expert from Email Geeks suggests self-hosting or dedicating a whole domain for SFMC use if the hosting provider can't point the subdomain to four different NS servers. He explains that dedicating a domain is suboptimal because it can't be used for anything else or have a website on it.

March 2023 - Email Geeks

What the documentation says
5Technical articles

Salesforce Marketing Cloud requires delegating a subdomain to its NS records by creating NS records at the domain registrar that point to Salesforce's name servers. This delegation process, which involves updating NS records at the parent domain's registrar, ensures that DNS queries for the subdomain are correctly routed. The DNS standard (RFC 1035) specifies that NS records delegate a domain to name servers, and multiple NS records should be used for redundancy. Creating these records requires accuracy. Changes to NS records can take up to 48 hours to propagate, and tools like `dig` or `nslookup` can be used to check the propagation status.

Key findings

  • SFMC Requirement: SFMC requires subdomain delegation via NS records.
  • Delegation Process: Delegation involves updating NS records at the domain registrar.
  • DNS Routing: NS records ensure correct routing of DNS queries for the subdomain.
  • Redundancy: Multiple NS records are recommended for redundancy.
  • Propagation Time: NS record changes can take up to 48 hours to propagate.

Key considerations

  • Accuracy: Ensure accuracy when creating NS records to avoid DNS resolution issues.
  • Propagation Wait: Account for the potential 48-hour propagation time when making NS record changes.
  • Monitoring: Use tools like `dig` or `nslookup` to monitor NS record propagation.
  • SFMC Specific Instructions: Follow Salesforce's specific documentation for NS record setup.
Technical article

Documentation from DigitalOcean.com explains the process of creating NS records in a DNS control panel. It emphasizes the need for accuracy when copying values from your ESP.

October 2022 - DigitalOcean.com
Technical article

Documentation from Cloudflare.com explains that DNS record changes, including NS records, can take up to 48 hours to propagate across the internet. It suggests using tools like `dig` or `nslookup` to check the propagation status.

April 2022 - Cloudflare.com
Technical article

Documentation from Salesforce Help explains that Salesforce Marketing Cloud requires delegation of a subdomain to Salesforce NS records for email sending. This involves creating NS records at the domain registrar that point to Salesforce's name servers.

March 2022 - Salesforce Help
Technical article

Documentation from Oracle Help Center explains that when delegating a subdomain, it's necessary to update the NS records at the parent domain's registrar to point to the name servers provided by the email sending service. This ensures that DNS queries for the subdomain are correctly routed.

February 2023 - Oracle Help Center
Technical article

Documentation from RFC 1035 (the standard for DNS) explains that NS records are used to delegate a domain or subdomain to a set of name servers. Multiple NS records should be provided for redundancy.

May 2023 - RFC 1035