🏆 ✓ Trusted since 1992 - 34 Years of Excellence

🌐 DNS Secondary Service - Just £1/Month

Geographic redundancy for your name servers with automatic AXFR zone transfers, DNSSEC support, and multiple authoritative DNS servers. Ensure 100% DNS uptime.

* All prices include UK VAT at 20% • Cancel anytime • No setup fees • No account needed

Geographic Redundancy Multiple Locations
AXFR Zone Transfers Automatic Sync
DNSSEC Support Signed Zones
Unlimited Zones No Zone Limits

🔄 DNS Redundancy Without Managing Infrastructure

Secondary DNS provides critical name server redundancy for just £1 per month without having to manage your own network of DNS servers. Ideal for hosting providers, ISPs, and businesses who run their own primary DNS server but require additional geographic redundancy and fault tolerance. Our secondary servers automatically clone your DNS zones via AXFR zone transfers and serve authoritative responses globally. Having multiple name servers in geographically diverse locations is critical to your online presence - if your primary DNS fails, secondary servers ensure continuous resolution. Perfect for high-availability requirements, disaster recovery planning, and meeting DNS best practices.

Enterprise DNS Redundancy

🌍

Geographic Diversity

Multiple authoritative name servers in geographically diverse locations ensure continuous DNS resolution even if entire data centers or regions experience outages.

🔄

Automatic Zone Transfers (AXFR)

Full zone transfers (AXFR) and incremental transfers (IXFR) automatically synchronize zone data from your primary server. Changes propagate instantly to all secondary servers.

🔐

DNSSEC Compatible

Full support for DNSSEC-signed zones. Our servers transfer and serve DNSSEC records (DNSKEY, RRSIG, NSEC, DS) authoritatively while maintaining signature validity.

📡

Multiple Master Support

Specify multiple primary servers for each zone. Our servers rotate through masters automatically if one fails, ensuring zone transfers always succeed.

🌐

IPv4 & IPv6 Support

All name servers support both IPv4 and IPv6 resolution. Dual-stack architecture ensures compatibility with all internet users and modern network infrastructures.

Instant Activation

Add zones through the web control panel and begin zone transfers immediately. No waiting, no approval processes - start protecting your DNS within minutes.

Unlimited Zones

No arbitrary zone limits. Add as many domains as needed for a single flat rate. Perfect for hosting providers, registrars, and businesses with large domain portfolios.

📊

Web Control Panel

Manage zones, monitor transfer status, view statistics, and configure settings through an intuitive web interface. No command-line expertise required.

⚙️ Technical Specifications

Complete DNS Secondary Service specs - £1/month

Feature Specification
Service Type Secondary/Slave authoritative DNS
Zone Transfers AXFR (full) and IXFR (incremental) supported
Zone Limit Unlimited zones per account
Transfer Method NOTIFY-triggered and refresh interval
Primary Server IPs Dedicated transfer servers (not public resolvers)
Multiple Masters Yes - specify multiple primary servers per zone
DNSSEC Full support - transfers and serves signed zones
TSIG Authentication Transaction signatures for secure zone transfers
IPv4 Support All name servers support IPv4 queries
IPv6 Support All name servers support IPv6 queries
Name Servers 5 geographically distributed authoritative servers
Server Locations Multiple continents for geographic diversity
Refresh Interval Configurable via SOA record (typical: 3 hours)
Retry Interval Configurable via SOA record (typical: 1 hour)
Expire Time Configurable via SOA record (typical: 1 week)
Minimum TTL Honors zone file TTL values (no forced minimums)
Wildcard Records Fully supported - no restrictions
Record Types All standard DNS record types (A, AAAA, MX, CNAME, TXT, NS, etc.)
Zone Validation Automatic verification of successful transfers
NOTIFY Support Receives and processes DNS NOTIFY messages
Query Logging Optional query statistics and logging
API Access RESTful API for zone management automation
Control Panel Web-based zone and transfer management
Setup Time Immediate - add zones and start transfers instantly
Support 24/7 technical support for configuration
Contract Monthly, cancel anytime

🔧 How Secondary DNS Works

📡 Zone Transfer Process

When you configure a secondary zone, your primary DNS server sends the complete zone file to our servers via AXFR (Authoritative Zone Transfer). Our servers store a read-only copy and begin answering queries authoritatively. When you update records on your primary server, it sends a NOTIFY message to our servers, triggering an immediate zone transfer to synchronize changes. This typically happens within minutes of making changes.

🔄 Full vs Incremental Transfers

AXFR (full zone transfer) sends the entire zone file - used for initial setup and when many records change. IXFR (incremental zone transfer) sends only changed records - more efficient for small updates. Our servers automatically use the most efficient method based on the SOA serial number comparison and change size.

🔐 Security & Authentication

Configure your primary server to allow zone transfers only to our dedicated transfer IPs. TSIG (Transaction Signature) adds authentication using pre-shared keys to ensure only authorized servers can transfer zones. For DNSSEC-signed zones, cryptographic signatures are transferred and validated to maintain the chain of trust.

🌍 Geographic Distribution

Our five name servers are geographically distributed across multiple continents and network providers. This ensures that even if an entire region experiences network issues or natural disasters, DNS resolution continues from other locations. Recursive resolvers automatically query alternate servers if one is unreachable.

📊 Monitoring & Verification

After zone transfers, our systems automatically verify that all secondary servers have synchronized successfully and are serving identical data. The control panel shows transfer status, timestamps, serial numbers, and any sync issues requiring attention.

✅ Why Use Secondary DNS?

High Availability
If your primary DNS fails, secondary servers continue resolving queries - zero downtime
Disaster Recovery
Geographic diversity protects against data center outages, network failures, and regional disasters
Load Distribution
Multiple servers share query load, improving response times and reducing server stress
DDoS Resilience
Distributed servers make it harder to overwhelm your DNS with attack traffic
Best Practice Compliance
Industry standards recommend at least two geographically diverse authoritative servers
No Infrastructure Management
We handle servers, network, monitoring, updates - you just configure zones

Perfect For

🖥️
Hosting Providers & ISPs
Run primary DNS for customers with geographic redundancy
🏢
Enterprise Organizations
Ensure business-critical DNS remains available during outages
🌐
Domain Registrars
Provide DNS services to registrants with built-in redundancy
🔧
Self-Hosted DNS
Augment your own DNS server with off-site backup servers
📊
High-Traffic Websites
Distribute DNS query load across multiple servers
🔐
DNSSEC Users
Serve signed zones from multiple locations without key management complexity

Frequently Asked Questions

What is secondary DNS and why do I need it?
Secondary DNS (also called slave DNS) provides redundant name servers that automatically clone your primary DNS server. If your primary server fails due to hardware issues, network problems, or attacks, secondary servers continue answering queries. This ensures your domains remain resolvable 24/7. Industry best practices and many registrars require at least two authoritative name servers.
How do zone transfers work?
Your primary DNS server sends zone data to our servers using the AXFR/IXFR protocol. When you make changes, your server sends a NOTIFY message triggering an immediate transfer. Our servers synchronize automatically - you don't manage the transfer process. We verify all transfers completed successfully and all secondary servers have identical data.
Do I need to modify my primary DNS server?
Yes, minimally. Configure your primary server to allow zone transfers to our dedicated transfer IPs and optionally send NOTIFY messages when zones update. We provide exact configuration examples for BIND, PowerDNS, and other popular DNS servers. Most setups take 5-10 minutes.
Can I use this with DNSSEC-signed zones?
Absolutely. Our servers fully support DNSSEC. When you transfer a signed zone, we receive and serve all DNSSEC records (DNSKEY, RRSIG, NSEC/NSEC3, DS) while maintaining signature validity. The chain of trust remains intact - resolvers can validate signatures served by our servers.
How many zones can I have?
Unlimited. Unlike providers that charge per-zone or impose arbitrary limits, we have no zone restrictions. Add as many domains as you need for a single flat monthly rate. Perfect for hosting providers managing thousands of customer domains.
What happens if zone transfer fails?
Our servers retry according to the SOA retry interval (typically 1 hour). We alert you if transfers consistently fail. Secondary servers continue serving the last successfully transferred zone until expiry time (typically 1 week). This gives ample time to resolve issues before data becomes stale.
Can I have multiple primary servers?
Yes. Configure multiple primary server IPs for each zone. Our servers rotate through the list if one is unavailable. This provides redundancy even for zone transfers themselves - useful if you run multiple primary servers for your own redundancy.
Where are your name servers located?
We operate five geographically distributed name servers across multiple continents and network providers. This geographic diversity ensures queries can be answered even if entire regions experience outages. Specific locations may vary for operational reasons.
Do you impose TTL or record type restrictions?
No. We honor all TTL values from your zone file without forced minimums. All standard DNS record types are supported including wildcards, TXT records, SRV records, CAA records, and anything else conforming to DNS standards. Your zones, your rules.
How quickly do changes propagate?
When you update your primary server and send NOTIFY, our servers typically complete the zone transfer within 1-5 minutes. Changes become live on all secondary servers nearly immediately. Without NOTIFY, servers poll based on the refresh interval (configurable in SOA, typically 3 hours).

Ready for DNS Redundancy?

Protect your DNS with geographic redundancy

£1/month
Get Secondary DNS Now →

No contracts • Cancel anytime • Instant activation