btw „primary“ and „secondary“ dns resolver is not working the way it sounds at first. It’s more like a loadbalancer instead of fail-over.