Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


DNS - secondary / backup entry - when is this used?

Posted on 2011-10-05
Medium Priority
Last Modified: 2012-05-12

Question about DNS. My colleage says that the secondary DNS is only ever used if the primary DNS is completely unavailable. Therefore if the irst is available but cannot resolve the DNS query the secondary server is not used.

However I was of the belief that if the first DNS server could not resolve the particular query then the secondy DNS would also be checked to see if it could resolve the query.

Which version is correct?

Many thanks.
Question by:afflik1923
  • 2
  • 2

Accepted Solution

Networking_Enthusiast earned 1336 total points
ID: 36921677
If a primary DNS server cannot resolve a query, it will likely use a process known as recursion whereby the primary will query other outside DNS servers (after checking its cache for a response first). The secondary will be used when the primary is down or unavailable (but is not queried when the primary cannot resolve a query because the secondary only has the same entries in its database that the primary does; the secondary copies from the primary)

Author Comment

ID: 36921761
But what about a circumstance when you say you have your local server for the primary server and then google DNS as the secondary?


and you put this on a workstation. Lets say the server at thr first IP is only resolving local DNS, I always though the secondary would allos the workstation still to get out on the internet?

Assisted Solution

Networking_Enthusiast earned 1336 total points
ID: 36922505
It depends on the operating system:

"Yes. You can set Google Public DNS to be your primary or secondary DNS resolver, along with your current DNS resolver. Please remember that operating systems treat DNS resolvers differently: some will only use your primary DNS resolver and use the secondary in case the primary one fails, while others will round-robin among each of the resolvers."

Source: http://code.google.com/speed/public-dns/faq.html#services

If your operating system only queries the local primary it would seem that you would not be able to get out to the internet unless your internal resolver also knows how to get out to the net.

Hope this helps!
LVL 27

Assisted Solution

Steve earned 664 total points
ID: 36930168
Hi afflik1923,

You are correct that multipe DNS entries on clients only allow failover if the first DNS server is not contactable.
If it is contactable but cannot resolve DNS the client usually stops trying as it accepts this as a valid response.

if you have a DNS server, you should set your main DNS server to use multipe DNS forwarders so if one is down it can use another. You can also set it to use 'root hints' to resolve the address itself if its DNS forwarders are not available.
If you are using a router for DNS you can often set a backup DNS in there so it will fall back to the 2nd option if the 1st doesnt work.

"and you put this on a workstation. Lets say the server at thr first IP is only resolving local DNS, I always though the secondary would allos the workstation still to get out on the internet? "

it is very rare the the primary DNS server can only resolve internal addresses as they are designed to forward queries for external domains to another server, often the ISP provided one.
It would be an odd setup and wouldnt really work with many clients as the internal DNS's response of 'no record found' would be a valid response and would cause the client to stop looking.

a DNS server responding that no record was located is still a response which is accepted by clients as an answer.


Author Closing Comment

ID: 36930328
Excellent input and well explained. Many thanks.

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
This program is used to assist in finding and resolving common problems with wireless connections.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question