0

My question is very simple (maybe a tad too simple), but I will try and phrase it in a way to hopefully assist future visitors.

I have just set up (successfully I hope) a DNS server at with some name server records on Ubuntu 12.10 while I am waiting for it to propagate I would like to know for future reference if I can use more than 2 forwarders in my /etc/named.conf.options.Would this speed up propagation?

Do make this question and answer more valuable what other public DNS servers are available over and above Google's public DNS adresses:

8.8.8.8
8.8.4.4

I would also like to know if a restart of bind means that my servers will need to re-propagate? Is there a methodology to update settings while bind is running?

1
  • This Q&A is essentially required reading in this case.
    – MDMarra
    Nov 12, 2012 at 20:42

2 Answers 2

3

I have just set up (successfully I hope) a DNS server at with some name server records on Ubuntu 12.10 while I am waiting for it to propagate I would like to know for future reference if I can use more than 2 forwarders in my /etc/named.conf.options.Would this speed up propagation?

The DNS Forwarders set on your authoritative servers and the "propagation" of a new zone have nothing to do with each other.

I would also like to know if a restart of bind means that my servers will need to re-propagate? Is there a methodology to update settings while bind is running?

Restarting the BIND daemon has nothing to do with the propagation of your zone.

2

I have just set up (successfully I hope) a DNS server at with some name server records

There's no need to hope. You can test it. dig is an amazing tool for playing around with DNS.

To start with, DNS cannot be completely self-contained. Someone else somewhere must know about you so they can find the nameservers you have just set up. This someone should be your registrar. They will have passed this on to their parent organisation who will publish the info in their nameservers. If your nameservers are also part of the same domain they serve, you will also have to tell your registrar what their IP addresses are so the parent can provide glue. This is the only step that takes some time that you can't control or get around with dig.

So the first query you need to make with dig is to find out what everyone knows about your nameservers. (Technically, this isn't the first query... you need to know where the root servers are then ask them where your TLD is then ask your TLD where yours are, but we can skip that for now.)

dig example.com NS

This query should return your namserver records (something like ns1.example.com and ns2.example.com) and hopefully an ADDITIONAL section with the IP addresses of your nameservers. If it doesn't have the ADDITIONAL section, this one should:

dig @ns1.example.com example.com NS

Once you have verified that your parent zone knows about your nameservers, you can test that they are working correctly by firing various different queries at them. This is done using the @ syntax above.

There is no waiting for "propagation" at this stage. If you add a new record and restart bind, you can make a query using the @ syntax to specify your nameserver and you will see that new record immediately. If you change a record, you will see that change immediately too, even if you had just done the same query and would normally expect the result to be cached, because the authoritative nameservers don't cache their own records.

I always recommend intodns.com because they do a whole bunch of queries for you and will let you know of any problems they see, such as only having one nameserver or having all of your nameservers on the same autonomous system.


As for forwarders, these serve a different purpose. These are for domains that you are not authoritative for. When one of your clients queries google.com, you don't know the answer so you have to go and ask someone else. You could mess around with all that asking the root servers for the com nameservers and then asking the com nameservers for the google.com nameservers and then asking the google.com nameservers for the A record for google.com or you could just use a forwarder. Your DNS server asks someone else's DNS server to do all the running around for you, then you present the answer back to the client as if you had done all the hard work. (It would be polite at this stage to cache the result.)


So to answer your questions:

  1. Yes you can use more than two forwarders. This can be to spread the load across the different servers and for redundancy if one or more of them go down, although bind can happily resolve queries without any forwarders at all so it's fine if they all go down.
  2. No, forwarders are for resolving other people's domains, not serving your own domains.
  3. OpenDNS run public nameservers, as do Level 3 (although it seems they only continue doing this out of the goodness of their hearts because so many people depend on them). Many other people do too. A ServerFault answer is not a good place to keep such a list as it changes over time. A search for "Public DNS" is more likely to result in a good answer forever.
  4. Restarting bind doesn't affect any upstream or downstream servers unless you have changed values in your zones or the IP address of the server.
  5. You can reload zones using rndc reload. Any slave servers you have configured will check the master server after their waiting period is up and will update any zones as long as the serial has been incremented.

If you're going to run your own nameservers, get this book. Many of the other books there are well worth reading/owning.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .