DNS – Secondary Servers (AXFR)

In this article you will learn:

• What the secondary WEDOS DNS server settings are for
• How to set up secondary WEDOS DNS servers
• How to set up another provider’s secondary DNS
• Frequently Asked Questions

---

WEDOS NS as secondary DNS

You can use WEDOS DNS servers as secondary DNS servers, meaning you can have them download DNS records from other DNS servers using AXFR.

---

Setting up secondary WEDOS NS

You set up WEDOS DNS servers as secondary both on the side of WEDOS, and at the authoritative DNS server provider.

Setup on the WEDOS side

Add each domain that will use WEDOS DNS servers as secondary to the system using these steps:

1. Log in to Customer Administration ⧉.
2. In the top menu, select DNS.
3. In the left menu, select Add domain to DNS.
4. Fill in:
   • Domain name: enter the second-level domain name (without www or other subdomains, e.g. wds-test.cz).
   • Type: change the value to secondary.
   • Pattern: leave the value as no pattern.
   • Primary IP: enter the IPv4 address of the domain’s primary authoritative DNS server.
5. Tick the checkbox to agree.
6. Click the button Add Domain.

To find out whether any change has occurred on the primary DNS, WEDOS DNS relies on the REFRESH and RETRY values in the SOA header of the given domain. It does not accept notifications from authoritative DNS servers.

If you have made a change on the authoritative DNS and need it to be loaded into WEDOS DNS faster, use the Schedule AXFR button in the detail. The system will then perform a check within a few minutes.

Setup on the side of the authoritative DNS server provider

Secondary WEDOS DNS servers will download data from authoritative DNS servers via AXFR from IPv4 addresses in the range 46.28.104.64/27. Allow AXFR transfers for these addresses at your provider.

TSIG security

To increase the security of the transfer, you can use TSIG (Transaction SIGnature). If your primary server supports it and you have it set up there, enter the settings in the VEDOS administration:

1. Log in to Customer Administration ⧉.
2. In the top menu, select DNS.
3. From the list, select the domain for which you want to set up TSIG authentication.
4. In the left menu, select Domain settings.
5. In the section Domain tick the use of TSIG and fill in the name, algorithm and key in accordance with the TSIG settings on the primary server.
6. Click the buttons Save Changes and Apply Changes (in this order).

---

Another provider’s secondary DNS

If you want to use WEDOS DNS servers as primary and another provider’s servers as secondary, find out the following:

• IP address (or addresses) of the secondary DNS servers. Get this information directly from the provider.
• Information about TSIG security, if the provider allows its use.

Then set up outgoing AXFR using these steps:

1. Log in to Customer Administration ⧉.
2. In the top menu, select DNS.
3. Select the domain for which you want to enable outgoing AXFR.
4. In the domain settings, tick the checkbox allow outgoing AXFR for this domain and enter the IP addresses of the secondary DNS servers.
5. Click the button Save Changes and then Apply Changes.

If the operator of your secondary DNS servers supports TSIG security, you can use the button TSIG: set (new) to generate the name, algorithm and key to enter into your provider’s system. Using the button cancel you can then delete the TSIG data from the system.

Frequently Asked Questions

Was this article helpful?

Your feedback helps us improve our articles.

YesNo

Would you like to tell us something about this article? (optional)

Your message goes to the documentation team, who do not reply to it. If you need help, contact us using the contact form. Do not include passwords or personal data.

Leave this field empty