AD DNS Failover

Handian Sudianto 4,096 Reputation points
2023-08-25T03:36:34.56+00:00

Hello,

if we have 3 DNS server running on Domain Controller server with IP :

10.10.0.1

10.10.0.2

10.10.0.3

Then i have an application which required authentication to AD LDAP, now the application pointing to 10.10.0.1 and with this condition if server 10.10.0.1 is down so the authentication will be failed.

I have scenario to change LDAP pointing from 10.10.0.1 using our domain name (mydomain.com), if we nslookup mydomain.com will contains all 3 domain controller IP.

Now i just want to know if 10.10.0.1 down, can DNS give IP address to other running server?

So when the app query mydomain.com the DNS reply with ip 10.10.0.2 or 10.10.0.3.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,084 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,821 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 18,701 Reputation points Microsoft Vendor
    2023-08-25T05:29:42.02+00:00

    Hello Handian Sudianto,

    Thank you for posting in Q&A forum.

    You had better set the application pointing to three DNS servers, 10.10.0.1 and 10.10.0.2 and 10.10.0.3 if possible.

    I think this application might find 3 IP addresses through domain name resolution, but it may not know that the other 2 IP addresses are also the DNS addresses of the application itself (if you only set the application pointing to only one DNS server 10.10.0.1 instead of pointing to three DNS servers).

    I suggest you can test in your lab and check if 10.10.0.1 down, can DNS give IP address to other two running servers (10.10.0.2 and 10.10.0.3).

    Hope the information above is helpful. If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    ==========================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments