Learning centre
DNS guides and resources
Practical guides for DNS records, security, anycast, automation, and troubleshooting.
Featured resources
Start with the guides that cover the most common DNS operations and migration decisions.
Featured resourceManaging DNS with TerraformManage DNS zones, records, and DNSSEC as code with the DNScale Terraform provider. Install the provider, create records, use CI/CD, and avoid DNS downtime.Read guide
Featured resourceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guideFeatured resourceDNS Record Types ExplainedCompare DNS record types with examples. Learn when to use A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, PTR, HTTPS, SVCB, ALIAS, and more.Read guideFeatured resourceDNS Security Best Practices — Protecting Your DomainLearn 10 actionable DNS security best practices including DNSSEC deployment, CAA records, email authentication, registrar locks, rate limiting, and DNS monitoring.Read guideFeatured resourceDNS Propagation ExplainedUnderstand what DNS propagation is, why DNS changes take time to spread across the internet, and how to check propagation status for your domain.Read guide
DNS Operations
Run DNS changes, migrations, monitoring, troubleshooting, and rollback with less risk.
OperationsDNS OperationsA practical operating model for DNS changes, migrations, monitoring, troubleshooting, incident response, and rollback.Read guideOperationsDNS Change Review Checklist: Ship DNS Changes Without OutagesA practical DNS change review checklist for production records, TTL preparation, authoritative and recursive verification, rollback, monitoring, and PR reviews.Read guideOperationsPrimary DNS vs Secondary DNS — Redundancy and Zone TransfersUnderstand the difference between primary and secondary DNS servers, how zone transfers (AXFR/IXFR) keep them in sync, and how to build a redundant DNS infrastructure.Read guideOperationsDNSSEC Failure TroubleshootingDiagnose DNSSEC SERVFAIL outages caused by DS mismatches, expired signatures, unsigned answers, missing DNSKEY records, and unsafe DNSSEC disable steps.Read guide
13 more resources in this section.
DNS Automation
Automate DNS workflows with APIs, CI/CD, scoped keys, previews, and drift checks.
AutomationDNS AutomationA practical guide to automating DNS changes with APIs, CI/CD, DNS as code, scoped keys, previews, drift detection, and rollback workflows.Read guideAutomationDNS Drift Detection for Terraform, DNSControl, and Manual EditsDetect DNS drift across Terraform, DNSControl, manual dashboard edits, and API scripts with safe review, import, rollback, and CI patterns.Read guideAutomationGitLab CI DNS WorkflowsPractical GitLab CI patterns for DNSControl and Terraform DNS changes, including merge-request previews, protected deploys, scoped variables, and drift checks.Read guideAutomationDNS as Code Best PracticesA practical guide to managing DNS as code with ownership, review, previews, drift detection, scoped credentials, and safe migration patterns.Read guide
2 more resources in this section.
Infrastructure as Code
Automate DNS changes, migrations, and multi-provider operations.
AutomationManaging DNS with TerraformManage DNS zones, records, and DNSSEC as code with the DNScale Terraform provider. Install the provider, create records, use CI/CD, and avoid DNS downtime.Read guideAutomationManaging DNS with DNSControlLearn how to manage your DNS zones and records as code using DNSControl with the DNScale provider. Define your entire DNS configuration in JavaScript.Read guideAutomationDNS for Cloud Infrastructure — Best Practices and ArchitectureLearn cloud DNS best practices including service discovery, multi-cloud strategies, automation with Terraform, and TTL optimization for dynamic infrastructure.Read guideAutomationMulti-Provider DNS with Terraform & DNSControlDeploy DNS zones across DNScale and Hetzner DNS for redundancy using Terraform or DNSControl.Read guide
1 more resources in this section.
Performance
Understand anycast, latency, routing, and global DNS delivery.
PerformanceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guidePerformanceAnycast DNS vs Unicast DNS — Which Is Better for Your Domain?Compare anycast and unicast DNS routing to understand which approach delivers better performance, resilience, and DDoS protection for your domain.Read guidePerformanceWhat is Anycast DNS? A Plain-Language GuideAnycast DNS explained from the ground up — what it is, why it matters, and how BGP routing makes one IP reachable from many places.Read guidePerformanceRound-Robin DNS ExplainedHow round-robin DNS works, when multiple A or AAAA records are useful, and why round-robin is not the same as health-checked DNS failover.Read guide
4 more resources in this section.
Basics
Foundational internet, web, security, and computing concepts that support DNS operations.
BasicsWhat Is Cache? Browser, DNS, CDN, and Application Caching ExplainedLearn what cache means, why computers and networks cache data, how browser, DNS, CDN, application, database, and CPU caches work, and when to clear a cache.Read guideBasicsWhat Is a CAPTCHA Challenge Response?Learn what a CAPTCHA challenge-response is, how CAPTCHA verification works, where it fits in a security stack, and what it does not protect.Read guide
DNS Fundamentals
Start with the core concepts behind zones, TTLs, delegation, and resolution.
FundamentalsFQDN Explained - Fully Qualified Domain Names in DNSWhat an FQDN is, how it differs from a hostname or relative DNS name, why the trailing dot matters, and how FQDNs behave in zone files, terminals, and Kubernetes.Read guideFundamentals127.0.0.1 and Localhost ExplainedWhat 127.0.0.1 and localhost mean, how loopback networking works, why localhost is not public DNS, and how to debug local resolver issues.Read guideFundamentalsARP Explained - How IP Addresses Reach Local DevicesWhat ARP does, how IPv4 devices map IP addresses to MAC addresses on a local network, and how ARP differs from DNS.Read guideFundamentalsManaged DNS vs Self-Hosted DNS — Pros, Cons, and When to Choose EachCompare managed DNS services with self-hosted DNS servers. Understand the trade-offs in cost, complexity, security, and reliability to decide which approach fits your infrastructure.Read guide
11 more resources in this section.
DNS Record Guides
Reference guides for the DNS record types you configure most often.
RecordsDNS NS Record Explained — Nameserver DelegationLearn how NS records delegate DNS authority to nameservers, how glue records prevent circular dependencies, and how to configure nameserver delegation for subdomains.Read guideRecordsVanity Nameservers and Glue Records ExplainedHow vanity nameservers work, when glue records are required, and the operational risks of branded NS hostnames like ns1.example.com.Read guideRecordsCNAME vs A RecordUnderstand the differences between CNAME and A records, when to use each, and how to choose the right DNS record type for your domain setup.Read guideRecordsDNS Record Types ExplainedCompare DNS record types with examples. Learn when to use A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, PTR, HTTPS, SVCB, ALIAS, and more.Read guide
5 more resources in this section.
Security & Resilience
Protect domains from DNS attacks, spoofing, outages, and misconfiguration.
SecurityWhat Is a DDoS Attack? Types, Impact, and DNS ProtectionLearn what DDoS attacks are, how volumetric, protocol, and application-layer attacks work, and how anycast DNS networks protect your infrastructure.Read guideSecurityWhat is DNSSEC? A Plain-Language Guide to DNS SecurityDNSSEC explained from first principles — what it is, why it exists, how it works at a high level, and when you should turn it on for your domain.Read guideSecurityDNS Amplification Attacks Explained — How They Work and How to Prevent ThemUnderstand how DNS amplification attacks exploit open resolvers and spoofed IPs to generate massive traffic floods, and learn the prevention techniques that stop them.Read guideSecurityHow DNSSEC Works — KSK, ZSK, DS, DNSKEY, RRSIG, NSEC ExplainedA walkthrough of the DNSSEC chain of trust: how KSK and ZSK signing keys, DS records, DNSKEY records, RRSIG signatures, and NSEC/NSEC3 work together to authenticate DNS answers.Read guide
15 more resources in this section.
Email & Certificates
Configure mail authentication, TLS certificates, CAA, DANE, and DNS-01 flows.
Email & TLSWhat Is an SSL Handshake? TLS Handshake ExplainedLearn what an SSL/TLS handshake is, how ClientHello, ServerHello, certificates, cipher suites, and session keys work, and how to debug handshake failures.Read guideEmail & TLSLet's Encrypt DNS-01 Challenges with DNScaleAutomate Let's Encrypt certificate issuance and renewal with DNS-01 challenges using DNScale. Works for wildcard certificates, edge-proxied origins, and servers with no public port 80.Read guideEmail & TLSDNS over TLS (DoT) Explained — Encrypted DNS on Port 853DNS over TLS explained — what RFC 7858 actually does, how it differs from DoH and plain DNS, support across operating systems, and where ADoT (authoritative DoT) is heading.Read guideEmail & TLScert-manager DNS-01 with DNScaleUse cert-manager with the DNScale DNS-01 webhook to issue Let's Encrypt certificates for Kubernetes Ingress, Gateway, and wildcard certificate workflows.Read guide
10 more resources in this section.
Troubleshooting
Diagnose cache, propagation, resolver, and connectivity problems.
TroubleshootingWhat is WHOIS? Domain Registration Data ExplainedLearn what WHOIS is, how it works, the impact of GDPR on domain privacy, and how RDAP is replacing WHOIS as the modern standard for registration data lookup.Read guideTroubleshootingFix: DNS_PROBE_FINISHED_NO_INTERNETLearn what the DNS_PROBE_FINISHED_NO_INTERNET error means and how to fix it on Windows, macOS, Linux, and Chrome with step-by-step solutions.Read guideTroubleshootingHow to Flush Your DNS CacheStep-by-step instructions to flush your DNS cache on Windows, macOS, Linux, and Chrome. Learn why and when to clear your DNS cache.Read guideTroubleshootingWhat Is My IP Address (Windows and Mac)Learn what an IP address is, why it matters, and how to find it on Windows and Mac. DNScale explains how your IP connects your device to the internet.Read guide
DNScale Platform
Learn the product workflows behind zones, accounts, billing, and protected records.
PlatformHow to Close Your AccountLearn how to permanently close your DNScale account, what happens to your data, and how to resolve outstanding invoices before closing.Read guidePlatformHow to Update Your Payment MethodLearn how to update your credit card, change your default payment method, or update billing information on your DNScale account.Read guidePlatformMulti-User Accounts and Zone Access ControlLearn how to invite team members to your DNScale account, assign roles, and control which DNS zones each user can access.Read guidePlatformPaid Plans vs Pay As You GoUnderstand the differences between DNScale's subscription plans and Pay As You Go pricing, and find out which option suits your needs best.Read guide
2 more resources in this section.