(putting this back on list)
thank you for the feedback,now I have already start the slave server [root@bind-master-centos7 ~]# dig kaixinduole.com +nssearch SOA ns1.kaixinduole.com. shawn.kaixinduole.com. 2022041566 3600 900 604800 86400 from server 52.130.145.30 in 0 ms. SOA ns1.kaixinduole.com. shawn.kaixinduole.com. 2022041584 3600 900 604800 86400 from server 139.217.99.188 in 1 ms.
You'll note that the two servers have a differing SOA serial: 2022041566 vs 2022041584. Something has changed, because the zone now SERVFAILs: $ dig @9.9.9.9 kaixinduole.com ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 56297 When queried directly, I get a response: $ dig @52.130.145.30 ns1.kaixinduole.com +norec ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 I can't get rid of the feeling that we're not seeing the same server you are... -JP -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users