DNS Server Deployment with high availability and disaster recovery

Question

_{Tuesday, April 24, 2018 10:00 AM}

Hi,

We are looking to provide DNS as service to our customer and plan to deploy the Microsoft DNS server with highavailability and disaster recovery.

I have searched over the internet but not able to find any guide or tutorial to deploy the DNS in highavailability mode in main and DR site with ( active/passive) mode. 

Can anyone please guide or provide the proper guide/tutorial?

All replies (11)

_{Tuesday, April 24, 2018 3:56 PM}

Hi,

I think for what you to achieve you can do it simply by using 2 DNS servers in the configuration of a primary and secondary DNS Server for a given zone

Below a link explain that secondary DNS server provide fault tolerance and load balancing :

https://msdn.microsoft.com/en-us/library/windows/desktop/ms682092(v=vs.85).aspx

Best Regards,

_{Wednesday, April 25, 2018 9:32 AM}

Hi,

Thanks for your question.

There are multiple scenarios depend on your devices resources.

If there is only one server for DNS deployment. You should backup the DNS database perdically so that prevent the DNS server form the disaster unexpected.

Actually, if you deploy Hyper-V server with multiple VMs to build cluster or there are more than two servers, you may configure DNS as below discussed.

1）Configuring primary and secondary DNS as Dokoh said. You may also refer to the link,

http://www.itingredients.com/how-to-configure-secondary-dns-server-2012-r2/

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

2）If there is a domain deployed in your network, you may configure AD-Integrated DNS on this domain so that the DNS information can be replicated among all DC or DNS servers in Active Directory forest or domain as the following figure. Please refer to the following link,

https://technet.microsoft.com/en-us/library/cc526435.aspx?f=255&MSPPError=-2147217396

Hope above information can help you.

Highly appreciate your effort and time. If you have any questions and concerns, please feel free to let me know.

Wish you have a nice day!

Best regards, 

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Thursday, April 26, 2018 7:07 AM}

Hi Michael, 

Thanks for your reply. Actually we woud like to have some DNS ( 3 to 4) in main site and 3 to 4 server in DR to provide high availability and Disaster recovery. I need guidance  to make a proper design and have following questions. 

1. Can we have three primary DNS servers (two in main and one in DR site) with read/write ability?  If yes, then we are plaining to put these server behind DMZ zone and these servers will not be serving client queries. We will have two secondary servers in main site and two in DR servers (only with read/write option) in DMZ zone to expose them to the internet. 

Is this right approach to design and build DNS Infrastructure to offer DNS services to customer? 

Regards,

M. Asif Janjua

_{Thursday, April 26, 2018 1:33 PM}

Hi,

Thanks for your update.

For your first question, Yes! Primary DNSs could locate behind DMZ and serve for intranet clients. They all have read & wirte permisson. 

Second question, secondary DNSs only have read permission of primary DNS and their domain zones copy from primary. 

Furthermore, as DNS copy depends on zoon transfer and AD replication, you need to configure permit ACL list on two sites firewalls between them to allow primary DNSs synchronization.

Highly appreciate your effort and time. If you have any questions and concerns, please feel free to let me know.

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Monday, April 30, 2018 6:39 AM}

Hi, 

Can we have two primary DNS servers for one/same DNS zone?  So if one server goes down then from other primary server we have the ability to update/add or remove the DNS records of DNS zone.

Note: The DNS zones would not be AD integrated.

_{Monday, April 30, 2018 7:03 AM}

Hi,

If the zone is not AD integrated it's not possible to have 2 primary servers for the same zone.

With the configuration of primary and secondary server what you can do in case of failure of the primary server is promote the secondary server to primary.

Best Regards,

_{Monday, April 30, 2018 7:08 AM}

Hi,

Thanks for your update.

Yes! We can setup multiple primary DNS for the same DNS zone in high availability and tolerance. Simply configuring the zone transfer to the name servers or the dns server listed as below.

Here is a link refer to DNS zone transfer, it may be helpful.

/en-us/previous-versions/windows/it-pro/windows-server-2003/cc781340(v=ws.10)

Highly appreciate your successive effort and time. 

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Monday, April 30, 2018 7:13 AM}

Hi,

Thanks for your update.

Yes! We can setup multiple primary DNS for the same DNS zone in high availability and tolerance. Simply configuring the zone transfer to the name servers or the dns server listed as below.

Here is a link refer to DNS zone transfer, it may be helpful.

/en-us/previous-versions/windows/it-pro/windows-server-2003/cc781340(v=ws.10)

Highly appreciate your successive effort and time. 

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Sunday, May 6, 2018 10:35 AM}

Hi,

How are things going on? Was your issue resolved?

Please let me know if you would like further assistance.

Wish you have a nice day!

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Tuesday, May 8, 2018 2:05 PM}

Hi,

How are things going on? Was your issue resolved?

Please let me know if you would like further assistance.

Best regards,

Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]

_{Wednesday, May 9, 2018 9:44 AM}

Hi,
Could the above reply be of help? If yes, you may mark it as answer, if not, feel free to feed back
Best Regards,
Michael

Please remember to mark the replies as an answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]