Quack, Since you were thinking about using Terraform I was currous if NS updates were supported and they are: https://registry.terraform.io/providers/hashicorp/dns/latest/docs This means you can create a subzone of ovirt.org and delegate the full subzone or specific RRs. Then if you wish certain entries accessible from ovirt.org directly we can simply add CNAMEs. This is an alternative to using freipa's DNS management. The doc does not do into fulld etails but it's "basic DNS management" which probably means not all RR types are supported. I guess one question is how do you wish the main zone to be managed. I like to be able to manage the zone file by myself with comments and use subzones for automation but freeipa or DNS providers can do it all for you and provide an API too (with the same RR types limitation though, so it depends what kind of data you wish to put into it). I guess that's why RH decided to use IPA.REDHAT.COM instead of REDHAT.COM, freeipa can manage its own DNS entries (SRV…) for the provided services but you can still manage your main zone the way you want (for specific or historical reasons). I guess the domain to use for freeipa is also something to consider. \_o<