Add a secondary DNS server to DNSimple
Table of Contents
- Getting started
- Enable Secondary DNS
- Edit Secondary DNS Configuration
- Disable Secondary DNS
- AXFR Name Server Details
- Frequently Asked Questions
DNSimple does not support Secondary DNS if you have DNSSEC enabled. They will not work in conjunction. Please ensure that you are not currently using DNSSEC, or disable DNSSEC before using Secondary DNS. You can read more about the complexities of multi-signer DNSSEC models in RFC 8901.
Getting started
Before setting up Secondary DNS with our systems, you need to choose, activate, and gather information for the secondary DNS provider you’ll be using.
We provide pre-configurations and step-by-step guides for 3 providers:
You can configure Secondary DNS with any provider by choosing the custom option. Once you know which provider you’re going to use, and have made the necessary configuration on their side, continue with this guide.
You can configure Secondary DNS on all domains whether they delegate to us or not. But if you’ve pointed delegation elsewhere, you’ll need to point the domain to DNSimple before the configuration will take effect.
If you don’t have your domain registered with us, update the delegation of your domain at your registrar to use the secondary name servers you have chosen. If you set up the secondary name servers ns1.secondary.com
and ns2.secondary.com
, delegation at your registrar will need to change from:
ns1.dnsimple.com
ns2.dnsimple-edge.net
ns3.dnsimple.com
ns4.dnsimple-edge.org
to
ns1.dnsimple.com
ns2.dnsimple-edge.net
ns3.dnsimple.com
ns4.dnsimple-edge.org
ns1.secondary.com
ns2.secondary.com
Revert this step if you ever disable Secondary DNS for your domain.
Enable Secondary DNS
You can get started with Secondary DNS from the DNS section of the domain management page.
You’ll see a page where you can choose your secondary provider. If your provider is Dyn, DNSMadeEasy, or EasyDNS, you’re one click away from completing the configuration. You can also apply name servers from a name server set if you have one configured with your secondary provider’s name servers. Otherwise, select the custom option to manually input the desired name server names. You’ll see a page for providing the names for NS records and the IP addresses that should be allowed access for the zone transfer. Retrieve these details from your secondary DNS provider.
Selecting a pre-configuration will prepopulate the correct values for you. Click on “Enable” at the bottom of the page.
If you choose the custom option, you’ll be prompted to enter the NS records and the IP address for the zone transfer.
If you choose the “Choose from Name Server Set” option, you can choose from the available name server sets in your account.
Once you submit the form with the proper details, you’ll be redirected to the domain management page with updated details.
On the domain management page you may see a warning message to highlight potential issues with the Secondary DNS configuration, like:
- The Secondary DNS configuration update is still propagating to the primary name server.
- The configured secondary name servers are not all serving the same zone data as the primary. This could be due to propagation delays or an issue with the AXFR set up at the Secondary DNS provider.
- The name server delegation you have set up at your registrar is missing one or more of the name servers specified in the Secondary DNS configuration.
If your domain is registered with us, we will replace whatever delegation you have set for the domain with our name servers and the secondary name servers you’ve configured. If you are delegating to another provider for your DNS, the values at the registry will be updated to match the NS set on the apex zone of your domain as represented in our record editor.
Adding a secondary DNS zone with DNSimple as leader from the dashboard
Alternatively, you can add a secondary DNS zone with DNSimple as leader from your dashboard:
- Log in to DNSimple with your user credentials.
- If you have more than one account, select the relevant one.
- Click from the Dashboard, and choose from the provided options.
- Choose the desired provider from the options.
- Enter the .
- Enter the and if you chose the custom input option.
- Click .
Behind the Scenes
Once Secondary DNS has been correctly set up for a particular domain, every zone change will be replicated on the Secondary DNS provider. All existing records will be copied over, including standard records and DNSimple custom records like ALIAS
and URL
. These will be resolved and the resulting value will be pushed to the secondary.
Until Secondary DNS is disabled for a particular domain, all record changes you make on DNSimple will be automatically synchronized to your Secondary DNS provider.
Edit Secondary DNS Configuration
Once you have set up Secondary DNS, you might need to tweak details about your configuration. Do this from the DNS section of the domain management page.
Disable Secondary DNS
If you don’t want to use Secondary DNS via AXFR, click the button
AXFR Name Server Details
To set up your secondary provider, give them the server that will respond to AXFR queries (also known as DNS zone transfer). Some providers will ask for a host name, and others will ask for an IP address.
The host name for the DNSimple AXFR server is axfr.dnsimple.com. The IP addresses on that node are:
18.189.127.127
2600:1f16:ae2:e902:6881:5f5e:c245:887e
Please prefer the host name whenever possible. If any of these IP addresses should change, we’ll inform you in advance using your account email.
Frequently Asked Questions
-
What is Secondary DNS and why do I want it?
Secondary DNS is when you use a special protocol called AXFR to automatically transfer your zones to a secondary DNS provider whenever they change. This allows you to use DNSimple’s name servers and another DNS provider’s name servers at the same time.
This lets you have an active redundancy in your domain name resolution. If an issue came up with DNSimple, you’d still have active resolution with your other provider. This disaster prevention is very valuable to any products that need high uptime. When secondary DNS is enabled, those name servers may be used at any time by resolvers – not just when an issue arises resolving names through our name servers.
-
Can DNSimple serve as a secondary DNS provider?
DNSimple can’t synchronize zone changes from other name servers using AXFR. But you can combine our secondary DNS feature with our API or UI to have zone redundancy with other DNS providers. See DNSimple as a Secondary DNS provider.
-
How can I check that my secondary DNS configuration is correct?
If you’re using one of the secondary DNS providers for which we provide prepared configuration, please let us know if you experience trouble. Otherwise, you should be able to find the proper values in your provider’s documentation. You should also be able to test the configuration on their end.
-
How can I test that secondary DNS is working?
Once you’ve added the proper configuration and verified with your secondary provider that they can make AXFR queries and receive zone transfers, you should be able to query one or all of the secondary name servers with
dig
by pointing it at the secondary name servers. If you wanted to check the resolution foryourdomain.com
, and had addedns5.dnsmadeeasy.com
as a secondary DNS server, you could executedig @ns5.dnsmadeeasy.com yourdomain.com
to check the records you set with DNSimple on the apex domain. If there’s any difference between the response and what you get from DNSimple, something is likely misconfigured. -
Is the order of the name servers relevant?
No. The order of name servers in your registrar, whois record, NS record set, or secondary DNS configuration doesn’t matter. Resolvers will make requests against the name servers in your whois record by randomly selecting one or multiple name servers provided.