iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
To run private nameservers such as ns1.example.com and ns2.example.com on a VPS, you must do four things in the right order: run authoritative DNS software, publish matching zone records, register each in-bailiwick hostname with your registrar as a host (glue) record, and delegate the domain to those nameservers. The registrar glue is what breaks the bootstrapping loop created when a nameserver’s hostname is inside the same domain it serves.
This guide covers the complete setup, verification commands, propagation timing, and the failure modes that produce SERVFAIL, timeouts, or intermittent resolution.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →What a custom nameserver is
A custom, private, or white-label nameserver is an authoritative DNS server identified by a hostname in your own domain. Typical names are ns1.example.com and ns2.example.com. When a domain is delegated to these hosts, recursive resolvers ask your VPS directly for the domain’s authoritative records instead of using a third-party DNS service.
The nameserver hostnames are in-bailiwick: they are children of the domain they serve. That creates a bootstrap problem. To look up example.com, a resolver needs the addresses of ns1.example.com and ns2.example.com; to look up those addresses, it might need to resolve example.com first. The parent registry solves this with glue records—address records stored alongside the parent delegation.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
Glue, delegation, and zone records are different
- Parent delegation: the registry or parent zone lists which nameservers are authoritative for your domain.
- Glue records: the parent stores the IPv4 and/or IPv6 address supplied for each in-bailiwick nameserver hostname.
- Authoritative zone records: your DNS server returns the domain’s
NS,A, andAAAArecords, among all other records.
All three layers must agree. Registering a host at the registrar without creating the corresponding DNS records on the VPS, or creating zone records without registrar glue, leaves resolvers unable to reach the authoritative service.
Requirements before you begin
- A domain whose registrar lets you create child, private, host, or glue nameservers.
- A VPS with at least one stable public address. Two independently reachable addresses are preferable; record whether each server has IPv4, IPv6, or both.
- Authoritative DNS software such as BIND9, or a hosting control panel that manages an authoritative DNS daemon.
- Firewall access for both UDP port 53 and TCP port 53 on the VPS and at the infrastructure provider. DNS normally uses UDP, but TCP is required for larger responses, retries, and some DNSSEC-related traffic.
- Administrative access to the registrar and the VPS operating system or DNS panel.
- A plan to keep the previous DNS service online until the new delegation has been observed from outside the VPS.
Do not treat two IP addresses on one VPS as geographic redundancy. They can provide separate addresses, but a single host, disk, network path, or provider outage can still take both nameservers offline. For production domains, consider a second DNS server in another location or a managed secondary service.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Plan the names and addresses
Choose an in-bailiwick naming scheme
Use a predictable pair such as ns1.example.com and ns2.example.com. The names may be different, but every spelling and trailing-dot interpretation must remain consistent between the registrar, the zone, and the delegation. Avoid changing names during the migration unless necessary; every changed hostname requires new host records and cache time.
Assign stable addresses
For this example, the VPS has 192.0.2.10 and 192.0.2.11. These are documentation addresses; substitute the public addresses assigned to your servers.
| Nameserver hostname | IPv4 address | IPv6 address | Where it must appear |
|---|---|---|---|
ns1.example.com |
192.0.2.10 |
Use your assigned IPv6 address, if available | Registrar host record, parent glue, and zone A/AAAA |
ns2.example.com |
192.0.2.11 |
Use your assigned IPv6 address, if available | Registrar host record, parent glue, and zone A/AAAA |
Do not publish an IPv6 glue or AAAA record merely because an address exists on an internal interface. It must be globally reachable and permitted through every firewall on the path.
Prepare authoritative DNS on the VPS
Install or enable the DNS service
Install BIND9 or enable the authoritative-DNS component in your control panel. Configure it to listen on the public interface, not only on 127.0.0.1 or a private network address. Set recursion according to your security policy; an authoritative-only server generally should not provide open recursive service to the internet.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Create the authoritative zone
Create a zone for example.com and ensure its start-of-authority (SOA) record identifies the intended primary server and a responsible contact in the format required by your DNS software. Set an appropriate serial value and refresh, retry, expire, and negative-cache timers according to your operating practice.
The zone must contain the nameserver records and address records that match the registrar objects:
example.com. IN NS ns1.example.com.
example.com. IN NS ns2.example.com.
ns1.example.com. IN A 192.0.2.10
ns2.example.com. IN A 192.0.2.11Add AAAA records only for usable public IPv6 addresses. Your regular records—such as the web server’s A or AAAA, mail exchanger records, and verification TXT records—also belong in this zone. The critical consistency rule is that each nameserver’s live address answer must match the address registered as glue.
Open both DNS transport protocols
Permit inbound UDP and TCP on port 53 in the operating-system firewall, the VPS control panel, and any upstream provider firewall. Verify that the DNS daemon is bound to the expected public address. A server that accepts UDP but rejects TCP can appear to work for small queries and fail for larger responses or particular networks.
Create registrar host or glue records
Sign in to the registrar for example.com and locate the function commonly labelled Register nameserver, Child nameservers, Private nameservers, Host records, or Glue records. This is not the same screen as the domain’s authoritative nameserver list.
- Choose the option to add or register a child host.
- Enter
ns1.example.comand associate it with192.0.2.10. If the registrar supports IPv6 glue, enter the public IPv6 address as well. - Save the host record and repeat for
ns2.example.comwith192.0.2.11. - Check the saved values character by character. A typo, swapped address, or stale address can make the domain unreachable for the period that recursive caches retain the incorrect information.
Some registrars require the host label only (for example, ns1) while others require the full hostname. Follow the field’s format; the resulting registered host must be the full ns1.example.com name.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Delegate the domain to the new nameservers
After the host records exist, open the registrar’s Nameservers or DNS delegation page. Replace the old authoritative nameserver list with:
ns1.example.comns2.example.com
Save the delegation. The parent zone now publishes the NS set and the glue addresses, while your VPS supplies the child zone’s authoritative answers. Cloudflare’s DNS guidance describes the failure mode directly: if the parent does not contain the authoritative nameserver names and required glue for in-bailiwick hosts, lookups fail.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallVerify the setup from outside the VPS
Run checks from a network that is not the VPS itself, such as a workstation or a separate monitoring host. Local resolver caches can hide a broken delegation.
1. Inspect the parent delegation and glue
Query a root or TLD server for the delegation. Replace 192.0.2.53 below with an appropriate parent-server address for the TLD you are checking:
dig @192.0.2.53 example.com NS +norecurseThe response should list both ns1.example.com and ns2.example.com and include address glue for each in the additional section. If the parent response omits one nameserver, the delegation is incomplete even if that server answers direct queries.
2. Query each authoritative server directly
dig @192.0.2.10 example.com SOA +norecurse
dig @192.0.2.10 example.com NS +norecurse
dig @192.0.2.11 example.com SOA +norecurse
dig @192.0.2.11 example.com NS +norecurseEach response should be authoritative, return the same SOA serial, and list the intended nameserver set. Query important application records directly as well:
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
dig @192.0.2.10 example.com A +norecurse
dig @192.0.2.11 example.com A +norecurse3. Test address consistency
dig @192.0.2.10 ns1.example.com A +norecurse
dig @192.0.2.10 ns2.example.com A +norecurseThe returned addresses must agree with the registrar glue. If you publish IPv6, repeat with AAAA and test reachability over IPv6 rather than assuming the record is usable.
4. Test UDP and TCP separately
dig @192.0.2.10 example.com SOA +time=3 +tries=1
dig @192.0.2.10 example.com SOA +tcp +time=3 +tries=1A timeout on either command indicates a firewall, routing, listener, or provider-policy problem. Confirm the daemon is listening on port 53 and that no security group blocks one protocol.
5. Check from a recursive resolver
dig example.com NS
dig example.com SOA
dig example.com AThese commands show what a normal resolver currently sees, including any cached delegation. Compare the result with direct authoritative queries before declaring the migration complete.
Propagation and the safe migration window
Nameserver information is cached independently of ordinary record TTLs. AWS documentation notes that recursive resolvers typically cache nameserver information for two days, so a delegation or glue change can take up to two days to become visible everywhere. Some resolvers update sooner; others retain the old data until its cache expires.
- Lower ordinary record TTLs before the migration if you control the old zone and have enough lead time.
- Create and verify the new authoritative service while the old service remains live.
- Register glue and change delegation only after direct tests pass.
- Monitor both old and new servers throughout the cache period.
- Remove the old service only after queries from several external networks consistently reach the new nameservers.
Lowering a website’s A-record TTL does not guarantee immediate nameserver-delegation changes; those are separate cached data. Keep the old DNS service available for the full transition window.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshoot common failures
SERVFAIL or widespread timeouts
- Confirm UDP and TCP port 53 are open at every firewall layer.
- Check that the DNS process is running and listening on the public address.
- Query each nameserver directly. If both fail, inspect the daemon and network path; if only one fails, repair that server before relying on the pair.
- Validate the zone for syntax errors and ensure the server loaded the current serial.
“Nameserver not found” or missing glue
Return to the registrar’s child-host or glue-record page. Verify that both full hostnames exist and that each points to the intended current address. A nameserver hostname inside the delegated domain cannot bootstrap from the child zone alone; usable parent glue is required.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Parent and child data disagree
Compare three outputs side by side: the parent’s NS response and glue, the direct NS/SOA response from each VPS address, and the direct A/AAAA response for each nameserver hostname. The parent nameserver set should match the child zone’s NS set, and every glue address should match the authoritative address answer.
Recommended Free Tools
Only some locations resolve
This normally indicates resolver caching during the delegation transition. Check several independent recursive resolvers, keep the old service online, and allow the cache period to pass. If the problem persists beyond that period, recheck parent glue and delegation rather than repeatedly changing records.
One nameserver works while the other fails
Test the servers independently with direct dig queries. Both must return authoritative SOA and NS answers and the same intended zone data. Fix the failed daemon, firewall, address, or zone synchronization before advertising the pair as redundant.
Self-hosted VPS DNS versus managed DNS
A VPS gives you control over the daemon, zone files, automation, and nameserver identity, but it also makes you responsible for uptime, patching, monitoring, backups, abuse handling, and DNSSEC operations. A managed service usually spreads authoritative servers across locations and handles much of that operations work, but you surrender some infrastructure control and may have different limits or automation interfaces.
| Decision factor | Self-hosted on a VPS | Managed DNS service |
|---|---|---|
| Operational responsibility | You maintain software, firewall rules, updates, backups, and monitoring. | The provider operates the authoritative fleet and its control plane. |
| Geographic redundancy | Must be designed and funded separately; two addresses on one VPS are not independent sites. | Usually distributed, subject to the provider’s architecture. |
| Registrar and glue control | You can publish your own in-bailiwick nameservers and manage their glue. | Usually delegate to provider-assigned nameservers; custom branding varies. |
| IPv4 and IPv6 | You choose which addresses to publish and must make both reachable. | Depends on the provider’s supported nameserver and glue model. |
| DNSSEC and automation | You configure signing, key rollover, APIs, and deployment safeguards. | Features and limits depend on the selected service. |
| Outage impact | A VPS, network, or configuration failure can affect every delegated domain. | Provider outages affect delegated domains according to its incident profile. |
| Total cost | Includes VPS capacity, secondary service, operations time, monitoring, and recovery planning. | Includes the service plan and any usage or feature charges. |
Choose self-hosting when you need control and can operate authoritative DNS reliably. Choose managed DNS when independent geographic redundancy and reduced maintenance are more important than running the DNS stack yourself.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Operational checklist
- Both nameserver host records exist at the registrar.
- Glue addresses are current and match the VPS public addresses.
- The parent delegation lists every intended nameserver.
- The authoritative zone contains matching
NS,A, and, where applicable,AAAArecords. - Each server answers authoritatively for SOA, NS, and required application records.
- UDP and TCP port 53 pass external tests.
- Monitoring tests each nameserver separately, not only through one recursive resolver.
- The previous DNS service remains available until caches have expired.
- Changes to addresses, nameserver hostnames, and DNS software are documented for recovery.
Minimal worked example
For example.com using the documentation addresses above:
- Register
ns1.example.comat192.0.2.10andns2.example.comat192.0.2.11as registrar host/glue records. - Publish
example.com NS ns1.example.comandexample.com NS ns2.example.comin the authoritative zone. - Publish
ns1.example.com A 192.0.2.10andns2.example.com A 192.0.2.11in that zone. - Delegate the domain at the registrar to the two hostnames.
- Query the parent for NS and glue, query both VPS addresses directly for SOA and NS, and test UDP and TCP.
- Keep the former DNS service online while recursive caches update.
If the parent glue, delegation, and authoritative answers agree—and both servers are reachable on both DNS transport protocols—the custom nameserver setup is correctly established.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
