Multiple Nameservers

What This Check Does

The Multiple Nameservers check verifies that your domain has more than one active nameserver. Running a single nameserver means your entire DNS infrastructure has a single point of failure — if that one nameserver goes down, your domain becomes completely unresolvable.

DNS Spy counts your active nameservers and verifies that at least two are configured and responding. If only one nameserver is active, this check fails.

Why It Matters

Having multiple nameservers is one of the most fundamental requirements for DNS reliability. RFC 1035 recommends at least two nameservers, and most registrars require a minimum of two for domain registration. A single nameserver creates a critical vulnerability: any maintenance window, hardware failure, network issue, or DDoS attack against that server results in complete DNS failure for your domain.

With multiple nameservers, DNS resolvers can failover to an alternate server if one is unavailable. Most DNS best practice guides recommend at least three nameservers for production domains.

NIST SP 800-81, Section 3.3, explicitly recommends multiple nameservers as a fundamental requirement for DNS architecture resilience. DNS Spy ensures your domain meets this critical baseline requirement.

NIST SP 800-81 Compliance

Section 3.3 of the NIST Secure DNS Deployment Guide recommends deploying multiple nameservers to eliminate single points of failure in DNS infrastructure. This check validates compliance with one of the most fundamental NIST DNS architecture requirements. DNS Spy's continuous monitoring ensures you are immediately alerted if a nameserver is decommissioned, reducing your count below the recommended minimum.

Good vs. Bad Configuration

Bad Configuration

Your domain has only one nameserver: ns1.example.com. If this server goes offline for any reason, your entire domain is unresolvable. No website, no email, no services.

Good Configuration

Your domain has at least two nameservers: ns1.example.com and ns2.example.com (ideally three or more). If one nameserver is unavailable, resolvers automatically use the others, maintaining DNS availability.

How DNS Spy Monitors This

DNS Spy counts your active nameservers during each monitoring cycle. If only one nameserver is detected, a high-priority alert is triggered. DNS Spy also monitors the responsiveness of each individual nameserver, so you know not just how many are configured but how many are actually operational.