Understanding DNS

Learn how DNS works, what each record type does, and how to edit them safely.

Beginner
DNS lets people use names while computers use numbers. This opening tutorial explains the problems DNS solves, how a DNS lookup works, and why DNS is so important to everythnig you do online.
  • #AuthoritativeNameserver
  • #DnsCache
  • #DnsLookup
  • +5
Beginner
Domain management often involves several companies, which can get confusing. This tutorial sorts out who runs the registry, who sells the domain, who hosts the DNS, and where you make to changes to it all.
  • #DnsHost
  • #DnsZoneEditor
  • #DomainRegistrar
  • +5
Beginner
DNS records are the instructions attached to your domain. You'll meet the four record types that come up most often and learn how to understand what they are saying.
  • #ARecord
  • #CnameRecord
  • #DnsRecordLookup
  • +5
Intermediate
Changing DNS settings can feel risky, but only when you don't have a safe routine to follow. This tutorial walks you through the safe order of operations, from finding the right control panel to checking that the new record is really live.
  • #AuthoritativeNameserver
  • #DigCommand
  • #DnsBackup
  • +5
Intermediate
Pointing a domain at a website sounds simple until the root domain and subdomains start behaving differently. This tutorial clears up when to use an A record, when a CNAME makes life easier, and how the pieces fit together.
  • #AaaaRecord
  • #ApexDomain
  • #ARecord
  • +5
Intermediate
Email DNS has two jobs. It needs to get incoming mail to the right place, and it needs to prove your outgoing mail is legitimate. This tutorial covers both through the use of MX, SPF, DKIM, and DMARC.
  • #DkimSelector
  • #DmarcAlignment
  • #DmarcPolicy
  • +5
Advanced
SRV records handle the services that need more than a hostname alone. They tell an app which server to use, which port to call, and how to choose when more than one endpoint is available.
  • #Autodiscover
  • #Dig
  • #Port
  • +5
Advanced
Reverse DNS turns the usual lookup around and asks what name an IP address points back to. That matters most on servers, especially mail servers, where reputation depends on that answer making sense.
  • #Dig
  • #Fcrdns
  • #InAddrArpa
  • +5
Intermediate
Most "DNS propagation" problems are really cache problems. Here, we show you how to tell whether the change is already correct at the source, which layers may still remember the old answer, and how to cut down propagation wait time.
  • #AuthoritativeAnswer
  • #DnsCache
  • #DnsPropagation
  • +5
Advanced
DNS only works if the answers can be trusted. The final tutorial looks at what can go wrong, from spoofed responses to account takeover, and the protections you can put in place that do the most to reduce that risk.
  • #CaaRecord
  • #CachePoisoning
  • #DnsOverHttps
  • +5
Scroll to Top