Suped

What are the options and considerations for pointing an SFMC email subdomain to multiple NS servers?

Summary

Configuring an SFMC email subdomain with multiple NS servers presents several options and considerations. SFMC requires delegation of a subdomain to their NS records, necessitating updating NS records at the domain registrar. If the hosting provider cannot support multiple NS servers, options include self-hosting DNS or dedicating an entire domain, though the latter is often suboptimal. Delegation to SFMC (or another ESP) allows them to manage complex DNS settings, including SPF, DKIM, DMARC, and newer features like BIMI, simplifying configuration and enabling automatic updates. However, delegating requires trusting the ESP's security practices. Self-hosting, while offering control, can be complex and error-prone. A robust DNS infrastructure with correctly set up NS records is vital for sender authentication, IP warming, and overall deliverability. It's important to verify DNS configuration after setup. Remember that DNS record changes may take up to 48 hours to propagate, so monitoring is essential. Properly configured authentication (SPF, DKIM, DMARC) after nameserver updates is crucial. Delegating to a subdomain isolates deliverability issues, protecting the main domain's reputation. If unable to set up multiple NS, domain migration should be considered.

Key findings

  • SFMC Requirement: SFMC and other ESPs often require subdomain delegation to their NS records for email sending.
  • Hosting Limitations: Some hosting providers may not support multiple NS records for a subdomain, necessitating alternative solutions.
  • Delegation Benefits: Delegation simplifies DNS management and enables ESPs to evolve settings with new features.
  • Security Risks: Delegating DNS involves trusting the security practices of the ESP.
  • Self-Hosting Complexity: Self-hosting DNS requires expertise and can be error-prone.
  • DNS Importance: A solid DNS setup is foundational for email deliverability, authentication, and IP warming.
  • Domain Isolation: Subdomain delegation protects the main domain's reputation from email deliverability issues.

Key considerations

  • Hosting Capabilities: Verify if your hosting provider supports multiple NS records for the subdomain.
  • Security Assessment: Thoroughly evaluate the security practices of the ESP before delegating DNS control.
  • Technical Expertise: Assess your team's technical capabilities for managing DNS records accurately if self-hosting.
  • Propagation Time: Account for the potential 48-hour DNS propagation time when making NS record changes.
  • Verification: Verify DNS configuration using online tools after setting up NS records.
  • SFMC Instructions: Follow SFMC's specific instructions for setting up NS records and delegating the subdomain.
  • Authentication Protocols: Ensure SPF, DKIM, and DMARC records are correctly configured for the delegated subdomain.
  • Domain Dedication Costs: Avoid dedicating the whole domain to SFMC due to cost inefficiencies if possible.

What email marketers say

10 marketer opinions

Configuring an SFMC email subdomain with multiple NS servers involves several options and considerations. Delegating the subdomain to SFMC's NS records allows SFMC to manage DNS settings for optimal deliverability, including SPF, DKIM, and DMARC. However, brands should be aware of potential security risks involved in delegating responsibility to a third-party vendor, and should evaluate the ESP's security practices. Some hosting providers might have limitations on the number of NS records allowed, necessitating alternatives like self-hosting DNS or using a dedicated domain. Correct DNS configuration is crucial for IP warming and sender reputation. After setup, DNS configuration needs to be verified. Ensuring SPF, DKIM, and DMARC are correctly configured is vital. Delegating to a subdomain helps protect the main domain's reputation, and if your hosting provider does not allow pointing to multiple NS, consider switching providers.

Key opinions

  • Delegation Benefits: Delegating to SFMC allows them to manage DNS records for optimal deliverability.
  • Security Risks: Delegating to a third party requires trusting their security practices.
  • Hosting Limitations: Some hosting providers may limit the number of NS records.
  • IP Warming: Correct DNS configuration is part of an IP warming strategy.
  • Reputation Protection: Subdomain delegation protects the main domain's reputation.
  • SPF/DKIM/DMARC Importance: Ensure SPF, DKIM, and DMARC are correctly configured for deliverability.

Key considerations

  • Security Assessment: Evaluate the security practices of the ESP before delegating the subdomain.
  • Hosting Capabilities: Confirm your hosting provider allows multiple NS records for the subdomain.
  • Alternative Options: Consider self-hosting DNS or using a dedicated domain if NS record limitations exist.
  • DNS Verification: Verify the DNS configuration after setup to ensure correct propagation and resolution.
  • Reputation Impact: Understand how delegating to a subdomain isolates deliverability issues.
  • Authentication Validation: Confirm that SPF, DKIM and DMARC are configured correctly for the subdomain.

Marketer view

Email marketer from Email Geeks suggests brands should keep their subdomains in their scope rather than delegate the responsibility. He highlights potential security risks with vendor delegation.

25 Feb 2024 - Email Geeks

Marketer view

Email marketer from NeilPatel.com shares that when setting up subdomains for email, it's crucial to ensure your DNS records (NS, A, MX, SPF, DKIM, DMARC) are correctly configured. NS records ensure the subdomain is properly delegated to the email sending service.

1 Jan 2025 - NeilPatel.com

What the experts say

5 expert opinions

When setting up an SFMC email subdomain, if the hosting provider can't handle multiple NS servers, self-hosting or dedicating a whole domain are options, though dedicating a domain is suboptimal. Delegation to the ESP allows them to manage DNS settings, including newer features like DKIM, DMARC, and BIMI. However, self-hosting DNS can be complex and prone to errors. A solid DNS infrastructure with correct NS record setup is essential for sender authentication and deliverability. Carefully consider whether to self-host or delegate, ensuring the chosen method is set up correctly to avoid deliverability issues.

Key opinions

  • Hosting Limitations: Some hosting providers might not support multiple NS servers for a subdomain.
  • Delegation Benefits: Delegation allows ESPs to manage complex DNS settings and evolve them with new features.
  • Self-Hosting Challenges: Self-hosting DNS can be complex and error-prone.
  • DNS Importance: A solid DNS infrastructure is foundational for email deliverability.
  • Domain Dedication Drawbacks: Dedicating a whole domain solely to SFMC is suboptimal as the domain cannot be used for anything else.

Key considerations

  • Hosting Capabilities: Verify if your hosting provider supports multiple NS servers.
  • Self-Hosting Expertise: Assess your team's expertise in managing DNS records accurately if self-hosting.
  • Delegation Trust: Consider the implications of trusting a third-party ESP with your DNS settings.
  • DNS Setup Accuracy: Ensure the chosen DNS setup method (self-hosted or delegated) is configured correctly.
  • Alternative Options: Explore all options (dedicated domain, provider migration) if multiple NS records cannot be set up.

Expert view

Expert from Email Geeks explains that self-hosting can be difficult due to the number of DNS entries required and potential errors by IT when setting it up.

27 Aug 2024 - Email Geeks

Expert view

Expert from Email Geeks explains that delegation allows providers to evolve subdomain settings as new features emerge, like DKIM keys, DMARC settings, and BIMI.

12 Feb 2022 - Email Geeks

What the documentation says

5 technical articles

Salesforce Marketing Cloud requires delegating a subdomain to its NS records by creating NS records at the domain registrar that point to Salesforce's name servers. This delegation process, which involves updating NS records at the parent domain's registrar, ensures that DNS queries for the subdomain are correctly routed. The DNS standard (RFC 1035) specifies that NS records delegate a domain to name servers, and multiple NS records should be used for redundancy. Creating these records requires accuracy. Changes to NS records can take up to 48 hours to propagate, and tools like `dig` or `nslookup` can be used to check the propagation status.

Key findings

  • SFMC Requirement: SFMC requires subdomain delegation via NS records.
  • Delegation Process: Delegation involves updating NS records at the domain registrar.
  • DNS Routing: NS records ensure correct routing of DNS queries for the subdomain.
  • Redundancy: Multiple NS records are recommended for redundancy.
  • Propagation Time: NS record changes can take up to 48 hours to propagate.

Key considerations

  • Accuracy: Ensure accuracy when creating NS records to avoid DNS resolution issues.
  • Propagation Wait: Account for the potential 48-hour propagation time when making NS record changes.
  • Monitoring: Use tools like `dig` or `nslookup` to monitor NS record propagation.
  • SFMC Specific Instructions: Follow Salesforce's specific documentation for NS record setup.

Technical article

Documentation from DigitalOcean.com explains the process of creating NS records in a DNS control panel. It emphasizes the need for accuracy when copying values from your ESP.

21 Sep 2023 - DigitalOcean.com

Technical article

Documentation from Cloudflare.com explains that DNS record changes, including NS records, can take up to 48 hours to propagate across the internet. It suggests using tools like `dig` or `nslookup` to check the propagation status.

10 Sep 2021 - Cloudflare.com

Start improving your email deliverability today

Sign up