The NS
records and their glue A
& AAAA
records on parent must match the NS
records on the name servers, as specified in IANA Technical requirements for authoritative name servers.
Consistency between glue and authoritative data
For name servers that have IP addresses listed as glue, the IP
addresses must match the authoritative A and AAAA records for that
host.
Consistency between delegation and zone
The set of NS records served by the authoritative name servers must
match those proposed for the delegation in the parent zone.
This tells that if .com
nameservers (*.m.root-servers.net.
) has example.com. NS ns1.example.com.
, the NS
records on ns1.example.com.
must match.
However, you can delegate further sub-zones just like your example.com.
is actually a sub-zone delegated by .com
, which is a sub-zone delegated by root .
. E.g. you could delegate control over all *.azure.example.com.
to Azure by azure.example.com. NS azuredns.com.
which doesn't need to match the NS
records for example.com.
.
For the non-technical people in your company: a company policy can't override global policies, in this case the requirements regarding domain names and name servers. Actually, the IANA requirements are mostly based on technological limitations and best practices. They are unlikely to change as it would require the widely supported technical specifications to be changed accordingly.