Make all nameservers publish the same NS records

Why it matters

The delegated nameservers answer with different sets of NS records, so they are not serving identical copies of your zone. Visitors then see different results depending on which server they reach.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

1. Query each delegated nameserver directly for the zone's NS and SOA records and note which one differs.
2. Bring the stale server up to date. For a secondary, check zone transfer and NOTIFY from the primary, and for a second provider, re-sync or re-upload the zone.
3. If two providers each host their own copy, keep one source of truth and copy the zone from it, or remove one provider from the delegation.
4. Confirm that every server returns the same SOA serial and NS set.

for ns in $(dig NS example.com +short); do
  echo "$ns"; dig +norec @"$ns" NS example.com +short | sort | tr '\n' ' '; echo
done

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the Nameservers and delegation check
• Delegate the domain to working nameservers
• Add a second nameserver
• Spread nameservers across more than one network
• Fix nameservers that do not answer for the domain
• Make unreachable nameservers answer, or remove them
• Give each nameserver name an IP address
• Point nameserver names at public IP addresses
• Point nameserver names at A or AAAA records, not CNAMEs
• Make the registrar's nameservers match the zone's NS records
• Add glue records for nameservers inside your own domain
• Update glue records to match the nameserver's real address
• Check that nameservers are in sync