Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to use DiG or nslookup to determine if a server is set to Master or Slave? And if a server is slave, return the Master's IP address?

share|improve this question

migrated from Oct 27 '09 at 21:29

This question came from our site for professional and enthusiast programmers.

up vote 0 down vote accepted

As far as I know, the answer is no -- certainly no standard way, since there are a billion different DNS server variants. One option would be to have a '' record, guaranteed to contain the IP address of the master (don't even expose it, no need) -- then all you need to do is compare the IP of the DNS server to the IP it gives you for the master, and you're all set. This is also imperfect, because of aliasing / multi-homing / whatever-the-hell (you can't guarantee that it's a different server), but ..

.. you seem to be implying that you're setting all this up yourself, in which case you should just have the record.

share|improve this answer
We run pdns authoritatively and have a customer that wants to use us as slave. He has numerous zones specified, and I am trying to find a way programmatically to process that list and determine if our server is set up as Native, Slave or Master. I don't have mysql access to filter the dns tables so I was hoping that there was a way to use Dig to discover Native, Slave or Master to use in my script. – Michael Moser Oct 27 '09 at 4:26
This field exists, in the SOA record. It is supposed to contain the master, even hidden. In practice, it is not always reliable. Its only practical use is to be the target of dynamic updates. – bortzmeyer Oct 27 '09 at 8:49

No, there is no way. The DNS protocol provides nothing to learn the master/slave relationship from the outside.

Also, this distinction is often gone today. Many domains have only masters, synchronized on a common database.

You can use heuristics (see Maas' suggestions or use the increase of serial numbers, the first name server to increase will be the master) but they are clearly not reliable.

share|improve this answer

First, technically a DNS server is not necessarily exclusively a master or a slave. This can be different on a domain by domain basis. It might be master for some domains and slave for others.

If the domain name's DNS zone is configured correctly - then you can request the zone's SOA-record which (amongst other things) contains the host name of the primary DNS server (the master).

For example:

Default Server:  UnKnown

> set type=SOA
Server:  UnKnown

Non-authoritative answer:
        primary name server =
        responsible mail addr =
        serial  = 1396486
        refresh = 7200 (2 hours)
        retry   = 1800 (30 mins)
        expire  = 1209600 (14 days)
        default TTL = 300 (5 mins)

You can now do another lookup on the primary server name (from the SOA-record - in this case ""), to get the master's IP address:

Server:  UnKnown

Non-authoritative answer:

The answer in this case is

share|improve this answer
+1 according to RFC the SOA record should have the primary source of the records for the domain listed (MNAME). Of course, most DNS implementations probably don't force this. – Doug Luxem Oct 29 '09 at 17:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.