K-20 DNS

K-20 offers authoritative and recursive DNS servers for the use of network members.

DNS resolvers

K-20’s recursive DNS resolvers are:

To use K-20’s DNS resolvers, we recommend implementing your own DNS cache servers and configuring them to point to K-20’s servers.
You may also configure your hosts or DHCP servers to use K-20’s servers directly.

Both servers are geo-redundant clusters spread across K-20’s node sites in Seattle, Portland, and Spokane. This provides performance and resilience; your queries will be answered by the nearest/fastest available node.
K-20 does not yet support DNS over HTTPS (DoH) or DNS over TLS (DoT).

K-20’s DNS servers are only accessible to hosts on the K-20 network. If you cannot reach the servers from the K-20 network (or when multi-homed with another provider), please contact the NOC.

Using K-20’s DNS resolvers is not necessary for K-20 members, or to resolve K-20 domain names. You may wish to use a mix of K-20’s and publicly available DNS resolvers for best performance and reliability.

Authoritative DNS

K-20 operates two authoritative DNS servers:

Apple and ruler are the primary authoritative DNS servers for wa-k20.net. and k12.wa.us. They also mirror other domains of K-20 members.

In most cases, K-20’s servers are secondary—they mirror DNS records managed by WSIPC or K-20 members themselves. So most authoritative DNS customers should contact WSIPC or their own network administrator for routine changes.
For help with or changes to K-20-hosted DNS records, please email noc@wa-k20.net with “DNS” in the subject. Make sure to include the exact domain names and IP addresses in question.

K-20 does not yet support hosting DNSSEC records.

See also

For general information about DNS (the Domain Name System), see:

• What is DNS? | How DNS works | Cloudflare
• Domain Name System – Wikipedia
• DNS and BIND (5e), Cricket Liu, Paul Albitz