Domain Zone Forwarder redundancy
Options
IT_Field_Support
Posts: 97 Ally Member
Hi all,
We have noticed some anormal behaviour on our many USG40w and Domaine Zone Forwarder.
We are using 4 DNS server for private zone.
After making some tests, we realise that if the first server on the list was not available for the zone xxx, the DNS request timeout without result.
The router does not failover on the other Domaine Zone Forwarder as we thought.
Could you tell us if it is a normal behaviour and how should act the Domain Zone Forwarder ? I cannot find any technical documentation on that.
Thanks,
Davy
0
All Replies
-
If USG cannot query the first DNS server, it will then uses the second DNS server to query.
In this example, create a fake DNS server 5.4.3.2 as the first DNS server and 8.8.8.8 as the second DNS server.
Connect one laptop in lan1 and open some websites.
Capture DNS packets in lan1.
In the packet trace, the first DNS server 5.4.3.2 doesn’t reply. Only the second DNS server 8.8.8.8 replies.
It means USG uses the second DNS server to query.
0
Categories
- All Categories
- 383 Beta Program
- 2.1K Nebula
- 116 Nebula Ideas
- 80 Nebula Status and Incidents
- 5.1K Security
- 75 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 907 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 209 Service & License
- 335 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.9K FAQ
- 887 Nebula FAQ
- 415 Security FAQ
- 231 Switch FAQ
- 201 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 137 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 73 About Community
- 62 Security Highlight