16

I have read that it's not OK to use .local in a domain especially with Microsoft Windows servers. I have also read the Windows Active Directory naming best practices article on ServerFault which was helpful but hadn't completely answered my question regarding "local" I was thinking it was somehow a reserved keyword and would present problems.

I own the domain keiboom.com and set up my Active Directory domain as local.keiboom.com. Can this create problems?

Community
  • 1
Kevin Boucher
  • 265

3 Answers3

27

No, that's fine.

The warning is against using domain.local as your AD domain name.

local.domain.tld is perfectly acceptable.

joeqwerty
  • 111,849
12

I'm not an expert on windows but in this case it does not matter. the .local domain is reserved for MDNS:

On linux at least by default the resolver uses Avahi (A mDNS implementation) for resolving hosts in the .local domain, skipping DNS so you get surprising DNS resolutions errors. I guess for similar reasons this can be a problem in Windows / AD too.

So, in short, don't use anything ending with .local as a domain as sooner or later it'll hurt.

The domain you've chosen, local.keiboom.com, seems OK though, but beware if you have websites hosted about the cookie domain (.keiboom.com from outside can be mixed with local.keiboom.com from the inside so you'll have to be careful with webapps).

Community
  • 1
Fredi
  • 2,307
  • 13
  • 14
0

As others have noted, RFC 6762 reserves the .local tld for use with multicast dns (mDNS). In the absence of mDNS, using .local would be fine, but because of the widespread use of mDNS, it is not a good idea to use that domain except for its intended purpose.

That said, there are domains reserved for local use in RFC 2606. These domains are .example, .invalid, .test, and .localhost. The rfc indicates they are each intended for a particular purpose, and that some systems may already utilize them:

  ".test" is recommended for use in testing of current or new DNS
  related code.

".example" is recommended for use in documentation or as examples.


".invalid" is intended for use in online construction of domain
  names that are sure to be invalid and which it is obvious at a
  glance are invalid.


The ".localhost" TLD has traditionally been statically defined in
  host DNS implementations as having an A record pointing to the
  loop back IP address and is reserved for such use.  Any other use
  would conflict with widely deployed code which assumes this use.
Schlueter
  • 107