I got very strange issue for me.
I have powerdns server with potentially thousands of cname records. This records inserted to my DNS via mysql queries from network http service. This is a way how I give free jhon_doe.MYHOST.COM domains for my clients.
Of course I want to update DNS information as soon as possible - for any of newly created domains. And that happens - in few minutes, or even seconds domain could be accessed.
But after some time that domains dissapearing. Some time after they reappearing. I found out, that my ttl setup was previously:
SOA record: 12 hours CNAME records: 1 hour
And then also discovered, that my primary DNS cannot notify my secondary DNS about changes. (It can, but secondary doesn't understand notify messages by some unknown reason. My secondary is NSD server, which is not under my control).
So the question is: Could it be, that when hostname record expired for current DNS, client asks for name from my SECONDARY DNS, which does not have this record yet? Giving back to client answer NXDOMAIN? Or that's a kind of my fantasy and I shouldn't think that things going that way?