Learning centre
DNS guides and resources
Practical guides for DNS records, security, anycast, automation, and troubleshooting.
Featured resources
Start with the guides that cover the most common DNS operations and migration decisions.
Featured resourceManaging DNS with TerraformManage DNS zones, records, and DNSSEC as code with the DNScale Terraform provider. Install the provider, create records, use CI/CD, and avoid DNS downtime.Read guide
Featured resourceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guideFeatured resourceDNS Record Types ExplainedCompare DNS record types with examples. Learn when to use A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, PTR, HTTPS, SVCB, ALIAS, and more.Read guideFeatured resourceDNS Security Best Practices — Protecting Your DomainLearn 10 actionable DNS security best practices including DNSSEC deployment, CAA records, email authentication, registrar locks, rate limiting, and DNS monitoring.Read guideFeatured resourceDNS Propagation ExplainedUnderstand what DNS propagation is, why DNS changes take time to spread across the internet, and how to check propagation status for your domain.Read guide
Infrastructure as Code
Automate DNS changes, migrations, and multi-provider operations.
AutomationManaging DNS with TerraformManage DNS zones, records, and DNSSEC as code with the DNScale Terraform provider. Install the provider, create records, use CI/CD, and avoid DNS downtime.Read guideAutomationManaging DNS with DNSControlLearn how to manage your DNS zones and records as code using DNSControl with the DNScale provider. Define your entire DNS configuration in JavaScript.Read guideAutomationDNS for Cloud Infrastructure — Best Practices and ArchitectureLearn cloud DNS best practices including service discovery, multi-cloud strategies, automation with Terraform, and TTL optimization for dynamic infrastructure.Read guideAutomationDNS as Code Best PracticesA practical guide to managing DNS as code with ownership, review, previews, drift detection, scoped credentials, and safe migration patterns.Read guide
5 more resources in this section.
Performance
Understand anycast, latency, routing, and global DNS delivery.
PerformanceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guidePerformanceAnycast DNS vs Unicast DNS — Which Is Better for Your Domain?Compare anycast and unicast DNS routing to understand which approach delivers better performance, resilience, and DDoS protection for your domain.Read guidePerformanceWhat is Anycast DNS? A Plain-Language GuideAnycast DNS explained from the ground up — what it is, why it matters, and how BGP routing makes one IP reachable from many places.Read guidePerformanceRound-Robin DNS ExplainedHow round-robin DNS works, when multiple A or AAAA records are useful, and why round-robin is not the same as health-checked DNS failover.Read guide
4 more resources in this section.
Basics
Foundational internet, web, security, and computing concepts that support DNS operations.
BasicsWhat Is Cache? Browser, DNS, CDN, and Application Caching ExplainedLearn what cache means, why computers and networks cache data, how browser, DNS, CDN, application, database, and CPU caches work, and when to clear a cache.Read guideBasicsWhat Is a CAPTCHA Challenge Response?Learn what a CAPTCHA challenge-response is, how CAPTCHA verification works, where it fits in a security stack, and what it does not protect.Read guide
DNS Fundamentals
Start with the core concepts behind zones, TTLs, delegation, and resolution.
FundamentalsFQDN Explained - Fully Qualified Domain Names in DNSWhat an FQDN is, how it differs from a hostname or relative DNS name, why the trailing dot matters, and how FQDNs behave in zone files, terminals, and Kubernetes.Read guideFundamentals127.0.0.1 and Localhost ExplainedWhat 127.0.0.1 and localhost mean, how loopback networking works, why localhost is not public DNS, and how to debug local resolver issues.Read guideFundamentalsARP Explained - How IP Addresses Reach Local DevicesWhat ARP does, how IPv4 devices map IP addresses to MAC addresses on a local network, and how ARP differs from DNS.Read guideFundamentalsManaged DNS vs Self-Hosted DNS — Pros, Cons, and When to Choose EachCompare managed DNS services with self-hosted DNS servers. Understand the trade-offs in cost, complexity, security, and reliability to decide which approach fits your infrastructure.Read guide
21 more resources in this section.
DNS Record Guides
Reference guides for the DNS record types you configure most often.
RecordsDNS NS Record Explained — Nameserver DelegationLearn how NS records delegate DNS authority to nameservers, how glue records prevent circular dependencies, and how to configure nameserver delegation for subdomains.Read guideRecordsVanity Nameservers and Glue Records ExplainedHow vanity nameservers work, when glue records are required, and the operational risks of branded NS hostnames like ns1.example.com.Read guideRecordsCNAME vs A RecordUnderstand the differences between CNAME and A records, when to use each, and how to choose the right DNS record type for your domain setup.Read guideRecordsDNS Record Types ExplainedCompare DNS record types with examples. Learn when to use A, AAAA, CNAME, MX, TXT, NS, CAA, SRV, SOA, PTR, HTTPS, SVCB, ALIAS, and more.Read guide
5 more resources in this section.
Security & Resilience
Protect domains from DNS attacks, spoofing, outages, and misconfiguration.
SecurityWhat Is a DDoS Attack? Types, Impact, and DNS ProtectionLearn what DDoS attacks are, how volumetric, protocol, and application-layer attacks work, and how anycast DNS networks protect your infrastructure.Read guideSecurityWhat is DNSSEC? A Plain-Language Guide to DNS SecurityDNSSEC explained from first principles — what it is, why it exists, how it works at a high level, and when you should turn it on for your domain.Read guideSecurityDNS Amplification Attacks Explained — How They Work and How to Prevent ThemUnderstand how DNS amplification attacks exploit open resolvers and spoofed IPs to generate massive traffic floods, and learn the prevention techniques that stop them.Read guideSecurityHow DNSSEC Works — KSK, ZSK, DS, DNSKEY, RRSIG, NSEC ExplainedA walkthrough of the DNSSEC chain of trust: how KSK and ZSK signing keys, DS records, DNSKEY records, RRSIG signatures, and NSEC/NSEC3 work together to authenticate DNS answers.Read guide
14 more resources in this section.
Email & Certificates
Configure mail authentication, TLS certificates, CAA, DANE, and DNS-01 flows.
Email & TLSWhat Is an SSL Handshake? TLS Handshake ExplainedLearn what an SSL/TLS handshake is, how ClientHello, ServerHello, certificates, cipher suites, and session keys work, and how to debug handshake failures.Read guideEmail & TLSLet's Encrypt DNS-01 Challenges with DNScaleAutomate Let's Encrypt certificate issuance and renewal with DNS-01 challenges using DNScale. Works for wildcard certificates, edge-proxied origins, and servers with no public port 80.Read guideEmail & TLSDNS over TLS (DoT) Explained — Encrypted DNS on Port 853DNS over TLS explained — what RFC 7858 actually does, how it differs from DoH and plain DNS, support across operating systems, and where ADoT (authoritative DoT) is heading.Read guideEmail & TLSBIMI Record Guide — Brand Logos in Email InboxesBIMI (Brand Indicators for Message Identification) explained — what it does, the DMARC, SVG, and provider-specific certificate requirements, the BIMI DNS record syntax, and a step-by-step deployment plan.Read guide
7 more resources in this section.
Troubleshooting
Diagnose cache, propagation, resolver, and connectivity problems.
TroubleshootingWhat is WHOIS? Domain Registration Data ExplainedLearn what WHOIS is, how it works, the impact of GDPR on domain privacy, and how RDAP is replacing WHOIS as the modern standard for registration data lookup.Read guideTroubleshootingdig command tutorial — 30 worked examples for DNS troubleshootingMaster the dig command for DNS diagnostics. 30 worked examples covering every common record type, +trace, +short, +cd for DNSSEC, AXFR zone transfers, EDNS, batch queries, and real-world troubleshooting recipes.Read guideTroubleshootingDNS Troubleshooting — A Symptom-First GuideA symptom-first guide to diagnosing DNS issues — site won't load, email bouncing, NXDOMAIN, SERVFAIL, intermittent failures — with the dig and nslookup commands that prove what's broken.Read guideTroubleshootingHow to Fix Slow DNS LookupDiagnose and fix slow DNS lookups by checking browser cache, OS DNS cache, router settings, recursive resolvers, VPN adapters, and authoritative DNS.Read guide
3 more resources in this section.
DNScale Platform
Learn the product workflows behind zones, accounts, billing, and protected records.
PlatformHow to Close Your AccountLearn how to permanently close your DNScale account, what happens to your data, and how to resolve outstanding invoices before closing.Read guidePlatformHow to Update Your Payment MethodLearn how to update your credit card, change your default payment method, or update billing information on your DNScale account.Read guidePlatformMulti-User Accounts and Zone Access ControlLearn how to invite team members to your DNScale account, assign roles, and control which DNS zones each user can access.Read guidePlatformPaid Plans vs Pay As You GoUnderstand the differences between DNScale's subscription plans and Pay As You Go pricing, and find out which option suits your needs best.Read guide
2 more resources in this section.