Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I got very strange issue for me.

I have powerdns server with potentially thousands of cname records. This records inserted to my DNS via mysql queries from network http service. This is a way how I give free jhon_doe.MYHOST.COM domains for my clients.

Of course I want to update DNS information as soon as possible - for any of newly created domains. And that happens - in few minutes, or even seconds domain could be accessed.

But after some time that domains dissapearing. Some time after they reappearing. I found out, that my ttl setup was previously:

SOA record: 12 hours CNAME records: 1 hour

And then also discovered, that my primary DNS cannot notify my secondary DNS about changes. (It can, but secondary doesn't understand notify messages by some unknown reason. My secondary is NSD server, which is not under my control).

So the question is: Could it be, that when hostname record expired for current DNS, client asks for name from my SECONDARY DNS, which does not have this record yet? Giving back to client answer NXDOMAIN? Or that's a kind of my fantasy and I shouldn't think that things going that way?

share|improve this question
up vote 2 down vote accepted

Clients don't know what the primary or secondary is. They don't care. Each listed nameserver is authoritative. If a client gets an (empty/NXDOMAIN) answer for a query from one (picked randomly), it won't ask the other.

For large zones that have to be synced very often you should probably run your own setup, and sync the backend databases for you nameservers in a more efficient way than copying the complete zone on each update (as DNS AXFR does).

share|improve this answer
MySQL cluster might be a good candidate for this sync. What ever the choice you make there, fix the DNS slave issue. Two different servers returning different results will make further troubleshooting a pain in the neck – Daniel Widrick Oct 1 '13 at 8:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.