Hi,
until now I had 3 secondaries running and a hidden primary. This ran perfectly well.
Now, I'd like to add some fallback functionality to deal with a potential longer
downtime of my hidden primary. Thus I added two more hidden primaries such that now every
host (3) has a hidden primary that can serve every secondary at all hosts. But: Only one
should be active! Zone and database data will frequently be rsynced to both inactive
primaries. If there would be a downtime I will have to start one of the others to
continue.
According to my understanding of
https://www.knot-dns.cz/docs/3.5/html/configuration.html#secondary-slave-zo… I have been
in the naive understanding that a configuration like ...
remote:
- id: primaryMWN # MWN hidden primary (running)
address: 10.0.1.203@5333
- id: primaryKBN # KBN hidden primary (not running,
standby)
address: 10.0.2.203@5333
- id: primaryEDN # EDN hidden primary (not running,
standby)
address: 10.0.3.203@5333
template:
- id: default
master: [primaryMWN, primaryKBN, primaryEDN] # queried in that
order
… would work, because of:
"Note that the master option accepts a list of remotes, which are queried for a zone
refresh sequentially in the specified order. When the server receives a zone change
notification from a listed remote, only that remote is used for a subsequent zone
transfer."
But I do get error massages like:
edn.ellael.lan (ns3) knot[29856]: warning: [
ellael.org.] refresh, remote primaryKBN not
usable
edn.ellael.lan (ns3) knot[29856]: info: [
ellael.org.] refresh, remote primaryEDN, address
10.0.3.203@5333, failed (connection reset)
edn.ellael.lan (ns3) knot[29856]: warning: [
ellael.org.] refresh, remote primaryEDN not
usable
edn.ellael.lan (ns3) knot[29856]: error: [
ellael.org.] refresh, failed (no usable master),
next retry at 2026-04-27T19:03:03+0200, expires in 1119353 seconds
edn.ellael.lan (ns3) knot[29856]: error: [
ellael.org.] zone event 'refresh' failed
(no usable master)
If I do use "master: primaryMWN" only, everything runs as expected.
I must have misunderstood something ...
Ok, I will have to modify all remaining secondary's knot.conf files if desaster
strikes and another primary has to take over.
BTW: I wanted to omit a multi primary setup as mentioned in
https://www.knot-dns.cz/docs/3.5/singlehtml/#multi-primary because I do have the feeling
that this is some sort of overkill for hosting 5 domains, only ;-)
Are there other ways to achieve my goal? ;-)
Thanks and regards,
Michael