Guides

Step-by-step guides to help you get the most out of your secondary DNS setup.

1

How to Set Up a Secondary DNS Server

Step-by-step guide to adding a secondary (slave) DNS server for your domain using AXFR zone transfers.

2

DNS Redundancy: Why It Matters

Learn why DNS is a single point of failure and how to build redundancy with secondary nameservers.

3

Understanding AXFR Zone Transfers

How AXFR and IXFR work, security considerations, and configuration examples for BIND, PowerDNS, and Knot.

4

How to Add Secondary DNS to CyberPanel Hosting Panel

Automate secondary DNS for CyberPanel hosting panel with SecondDNS. Every domain gets instant DNS redundancy via AXFR.

5

How to Add Secondary DNS to DirectAdmin Hosting Panel

Set up automatic secondary DNS for DirectAdmin hosting panel with BIND or PowerDNS. Instant DNS redundancy via AXFR.

6

How to Add Secondary DNS to Plesk Hosting Panel

Set up automatic secondary DNS for Plesk hosting panel. Domains and aliases get instant DNS redundancy via AXFR.

7

How to Add Secondary DNS to cPanel/WHM Hosting Panel

Set up automatic secondary DNS for cPanel/WHM servers with BIND or PowerDNS. Every domain and addon domain gets instant DNS redundancy via AXFR.

8

Personalized Nameservers: What You Need to Know

How to use your own hostname for secondary DNS and what to watch out for before you start.

9

What Is a DNS SOA Record and Why It Matters

The SOA record field by field: serial, refresh, retry, expire - how secondaries use them and how to diagnose a stale zone.

10

What Are DNS Glue Records and When Do You Need Them

Why a nameserver inside its own zone needs glue at the registrar, what breaks without it, and how to check delegation with dig.

11

Secondary DNS Server: What It Is and How It Works

What a secondary DNS server is, how it receives your zone with AXFR and NOTIFY, why registrars require one, and how to check it works.

12

TSIG Keys on Your Primary DNS Server

Configure a SecondDNS TSIG key on BIND, PowerDNS, NSD and Knot DNS so zone transfers are signed instead of allowed by IP address.