8

DNS

The Definitive Guide

8 chapters Last updated 21 September 2026 Free to read, no account

DNS is the piece of infrastructure every business depends on and nobody owns. It was configured once during a website project and has worked ever since, which is precisely why nobody can say how.

Most explanations either stop at "it turns names into numbers" or assume you are running a nameserver. Neither helps the person who needs to change a record and is not sure which company holds it.

This guide covers how resolution actually works, what each record type does, why propagation is not what you were told, and how to change things without breaking them.

In this guide you will learn:

  • How a lookup walks from the root to your record
  • What every common record type is for, and how each fails
  • Why propagation is caching, and what that changes
  • How to plan a migration around TTLs
  • Where your DNS actually lives, which is rarely your registrar
  • What DNSSEC signs, and why adoption stayed low

Contents

1

How a lookup works

Root, TLD, authoritative, and the caches in between.

2

The record types

A, CNAME, MX, TXT and the rest, and what each is actually for.

3

TTLs and propagation

Nothing propagates. Caches expire. The difference matters.

4

Registrar, DNS and hosting

Three companies, three jobs, and the confusion that costs hours.

5

Changing things safely

Migrations, TTL planning, and the order of operations.

6

When DNS breaks

Response codes, lame delegations, and reading a dig output.

7

DNS security

DNSSEC, cache poisoning, and what actually protects you.

8

Keeping the history

What a record contained before somebody edited it.

Chapter 1

How a lookup works

Root, TLD, authoritative, and the caches in between.

How a lookup works

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 2

The record types

A, CNAME, MX, TXT and the rest, and what each is actually for.

The record types

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 3

TTLs and propagation

Nothing propagates. Caches expire. The difference matters.

TTLs and propagation

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 4

Registrar, DNS and hosting

Three companies, three jobs, and the confusion that costs hours.

Registrar, DNS and hosting

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 5

Changing things safely

Migrations, TTL planning, and the order of operations.

Changing things safely

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 6

When DNS breaks

Response codes, lame delegations, and reading a dig output.

When DNS breaks

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 7

DNS security

DNSSEC, cache poisoning, and what actually protects you.

DNS security

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Chapter 8

Keeping the history

What a record contained before somebody edited it.

Keeping the history

This chapter is not written yet. Drop the prose into guide-bodies/<body>.html and rebuild.

Check yours

See where your own domain stands.

Everything in this guide, checked on your domain in about ten seconds. Free, no account, every finding shown in full.