mediaaustin
Member
Deliverability Nerd
- Joined:
- Jul 2024
- Posts:
- 276
- From:
- Austin, US
For a small shop I'd honestly just use your registrar's secondary if they offer it.
I run a few wordpress shops on a cheap VPS at Contabo
If Contabo goes down, your sites are down anyway. The DNS being up doesn't help when the server isn't. Secondary DNS is great for *DNS* redundancy but it won't save you from VPS downtime. If you do want to tinker, NSD is probably overkill for two zones. I ran my own for years and eventually moved everything to GreenCloudVPS's anycast secondary. Less to wake up to.
SPF, DKIM, DMARC — holy trinity ✉️
tomchan
Member
- Joined:
- Jul 2024
- Posts:
- 202
- From:
- Bristol, UK
Did anyone actually try this on a real shop yet or is it all lab setups
I keep meaning to set up a secondary at my spare Hetzner box but the NOTIFY part scares me. My registrar doesn't support it so I'd need to run the primary myself too, which feels like trading one problem for another.
Dont want things to break
This is basically where I'm at. My DNS is the one thing I never touch because it works. Tempted to just pay GreenCloudVPS for managed secondary and forget about it.
works on my bench ¯\_(ツ)_/¯
wilmaethqn44
Member
OP
- Joined:
- Jun 2024
- Posts:
- 135
- From:
- Cardiff, UK
Did anyone here actually test what happens when the primary is unreachable and cached TTLs start expiring? I keep wondering if my registrar's anycast is already good enough for a couple of small shops.
is tempting but I barely understand Docker. Has anyone just used a managed secondary instead of rolling their own.
frames, tables, still valid HTML
armstrongvds
Member
ARM Enjoyer
- Joined:
- Jun 2024
- Posts:
- 199
- From:
- Seoul, KR
I've been running secondary NSD on a tiny KnownHost instance for a couple of years now. NOTIFY from the registrar primary, AXFR restricted to my IP. It's been completely uneventful which is exactly what you want from DNS. The thing nobody mentions is the SOA expiry and refresh values. If your primary is down longer than the expiry window your secondary will still stop answering eventually. Secondary DNS is not magic, it just buys you time. For a WordPress shop I'd honestly look at your registrar's anycast first. If it's already anycast you're solving a problem you don't have.
one small ping for man...
