TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Is secondary DNS setup worth it?

19 点作者 gkrishna将近 3 年前
After recent Cloudflare outage, more people are suggesting to go with a secondary DNS. I'm afraid that it would be difficult to maintain configuration across multiple DNS providers. I'd love to know your experience in maintaining multiple DNS providers.

9 条评论

toast0将近 3 年前
If your DNS is pretty much standard DNS (basic zone files, or something equivalent), it&#x27;s pretty simple to use multiple providers using AXFR to transfer from wherever your source of truth is.<p>If you do fancy DNS, you&#x27;ll need to manage configuring them all to be &#x27;the same&#x27; yourself. Maybe there&#x27;s some tools out there, but it becomes write a config file you understand, and a script to reconfigure the provider to match, etc.<p>The fancier your DNS is, the harder it is to synchronize among multiple services. Things like monitoring and removing dead hosts is probably not awful, but if you need to synchronize geographic targeting, that&#x27;s going to be complex (and unlikely to be perfectly in sync; different DNS servers are likely to categorize IPs differently, and you&#x27;ll just have to live with it). Many moons ago, I used Akamai load feedback to divide usage between different locations, I don&#x27;t think that would work that well if using two (or more) services.
treffer将近 3 年前
Terraform and OctoDNS can make this easy.<p>Never let the UI of your vendor be the source of truth for your DNS setup.<p>If you have the zones in code then updates should be easy to distribute to multiple vendors.<p>Also: given the nature of DNS caching you will have to roll changes in a way that is compatible with temporary inconsistency anyway.<p>I have seen such a setup once and it was a life saver. People recommending that are right. People fearing the complexity are also right. Be careful to have good tooling.
wahern将近 3 年前
&gt; I&#x27;m afraid that it would be difficult to maintain configuration across multiple DNS providers<p>A secondary host should be able to pull zones from the primary using standard AXFR, optionally using TSIG authentication. The primary can also notify a secondary using DNS NOTIFY for near instantaneous synchronization.<p>For some of my domains I prefer hosting primary myself, along with e-mail, web, etc. I just find it easier managing NSD configs and zone files the old fashioned way (version controlled, of course), rather than mucking about with GUIs or proprietary APIs. But in those cases I&#x27;ll often use EasyDNS for secondary or tertiary. Whenever I edit and reload a zone file for one of these domains, NSD automatically pings EasyDNS, which then AXFR&#x27;s the new zone. Easy peasy, at least once you wrap your head around AXFR, TSIG, and NOTIFY.<p>Your domain registrar is the gatekeeper for glue NS records, so if your primary DNS host[1] ever had a sustained down period, it&#x27;s still relatively simple and fast to update your nameservers as needed.<p>[1] Yourself or another service--hopefully <i>not</i> the same as your registrar as that would defeat the purpose.
评论 #31832839 未加载
donmcronald将近 3 年前
I’d like to add.. Does anyone provide low volume secondary dns for cheap? Cloudflare would be my first pick, but:<p>&gt; Secondary DNS is only available to Enterprise customers. For more details on activation and pricing, contact your account team.<p>I recently hit the 150 host limit on Namecheap’s DynDNS and I wanted to see if I could set up a hidden primary DNS server that takes updates from something web based like nsupdate.info. It would be nice to have something like Cloudflare serving things publicly rather than exposing my self hosted bind server.<p>However, anything I can find is either rate limited a fair bit (Hurricane Electric - which looks nice feature wise) or doesn’t have proper TSIG support or is too expensive for what I need.<p>I <i>hate</i> having to start with the ghetto feature tier everywhere when I’m trying to learn. I wish I could just use all the features and pay for usage &#x2F; scale :-(
评论 #31832877 未加载
wiml将近 3 年前
I&#x27;m always confused that anybody <i>doesn&#x27;t</i> have secondary servers, for anything larger than a one-off vanity site.<p>If your DNS needs are simple, then running a secondary is extremely easy. The hardest part is that you&#x27;ll probably interact with it so rarely you&#x27;ll forget it&#x27;s there.<p>If your DNS needs are complex, then running a secondary is harder but it&#x27;s still probably a small fraction of the effort you&#x27;re putting into the primary server.
jf将近 3 年前
If you want to your site to be online when your DNS provider isn’t, then having a secondary DNS provider is an absolute must.
master_crab将近 3 年前
Secondary DNS is great for failover. I run dual piholes in a primary-secondary setup for that purpose.<p>The only issue you will run into is if your router can’t pass two DNS server addresses, or your client machines don’t know how to handle multiple DNS servers or failover behavior.
__d将近 3 年前
Secondary DNS providers will do a zone transfer from your primary provider, so the configuration is pretty minimal.
jesterson将近 3 年前
Worth it? It&#x27;s absolutely necessary if you want to avoid single point of failure.<p>Given quality of service declining over years for big and small companies and mass influx of soy latte boys into IT we can only expect amount of issues to grow in coming years, both in scope and magnitude.<p>And yea, if you are using single provider for your critical infrastructure, you have a ticking bomb.