Master-Master-Slave BIND setup

kiwistag used Ask the Experts™
We have a primary DNS server in the network but for some reason (likely due to security changes) it sometimes fails to respond DNS updates to the BIND slaves.

Is it possible to have a tiered slave system so if an urgent DNS record update is required when the primary server is partially unresponsive it steps down?

Master > Slave 1 > Slave 2

So Slave 2 would get DNS updates from Slave 1 rather than Master?

That way if need be we can turn a zone from slave to master instantly on Slave 1 and Slave 2 would get the updates for our zones until we sort out the issues on Master then we can simply return the affected zone on Slave 1 back to a Slave zone>
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2017
First remedy is to make sure your soa/ttl settings are such that provide you sufficient time to correct the issue.
Master => slaves
You could convert one of the slave DNS servers to be the new master while updating the remaining slave to reflect the new master.

Your question lacks detail chaining

The way bind works when you have notify settings relied on based on the NS records in the zone when a zone is updated on the master a notification is sent to NS record servers. The serial number of the zone if not changed, will lead to the change not propagating.
If NS servers are not referenced, your named.conf shoukd include the option also-notify {ipaddress_slave1;ipaddress_slave2};
The DNS servers need transfer rights on zones from master.....

DNS port 53 udp/TCP

On a slave
Dig @master axfr
See what you get..

Often the issue with a change taking a long time or until a reboot/restart of named is forgetting to update the serial or not the change not increasing the serial compared ..
host -C

It should list the serial number for the zone on each listed name server.


Reverted just keeping one master server since we also use DKIM.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial