Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Let’s say you register with a provider and you are given the following NS records:

Name Server: NS18.EXAMPLE.COM
Name Server: NS8.EXAMPLE.COM

Could you add these to increase resilience without having any negative consequences?

Name Server: ns4.google.com
Name Server: ns2.google.com
Name Server: ns3.google.com
Name Server: ns1.google.com
share|improve this question
up vote 17 down vote accepted

You can add as many DNS servers as NS records for a domain, but they need to fulfill two conditions:

  • They must host an authoritative copy of the DNS zone
  • They must be kept in sync

So, no, you can't add any random DNS server around the world (such as Google's ones), because they would not be authoritative for that zone and so they could not act as DNS servers for it (unless Google actually is your DNS provider, which doesn't seem to be the case).

But you can add as many DNS servers as you want, as long as they actually are properly configured authoritative DNS servers for that zone; they can reside anywhere you want: on your network, on a cloud VM, on a hosted service... just make sure to keep them in sync, either using a standard primary-secondary zone setup or a replication system (such as Active-Directory-integrated DNS does).

share|improve this answer
2  
I've seen some very weird things resulting from when people ignore the authoritative requirement, such as a .gov website including OpenDNS as their #3 backup. Good times. It's also important to keep the BCP 16 recommendations in mind when planning where your DNS servers are located, or bad things will happen. – Andrew B Mar 2 at 0:08

Unless the nameservers provide authoritive answers to queries there is no increased resiliency. Make sure that every associated dns server hosts a copy of the zone on its own.

share|improve this answer
    
noip.com/blog/2011/04/08/… This article leads you to believe that adding more NS record increases resilience, but the example shown shows only DN entries that belong to the same company. I don't know how to make google host a copy of the zone like you mentioned – Ulukai Mar 1 at 22:16
    
the same company may of course host the zone. it may even be the same metal. its just wiser to use different services on different hardware and best on different locations to get high availability. – Daniel Nachtrub Mar 1 at 22:27

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.