Learning centre
DNS guides and resources
Practical guides for DNS records, security, anycast, automation, and troubleshooting.
Featured resources
Start with the guides that cover the most common DNS operations and migration decisions.
Featured resourceManaging DNS with TerraformLearn how to manage your DNS zones and records as Infrastructure as Code using the DNScale Terraform Provider.Read guideFeatured resourceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guideFeatured resourceDNS Record Types - Complete Guide to Supported RecordsA comprehensive guide to all DNS record types supported by DNScale, including A, AAAA, CNAME, MX, TXT, SRV, NS, PTR, CAA, TLSA, SSHFP, HTTPS, SVCB, and ALIAS records.Read guideFeatured resourceDNS Security Best Practices ā Protecting Your DomainLearn 10 actionable DNS security best practices including DNSSEC deployment, CAA records, email authentication, rate limiting, and DNS monitoring.Read guideFeatured resourceDNS Propagation ExplainedUnderstand what DNS propagation is, why DNS changes take time to spread across the internet, and how to check propagation status for your domain.Read guide
Infrastructure as Code
Automate DNS changes, migrations, and multi-provider operations.
AutomationManaging DNS with TerraformLearn how to manage your DNS zones and records as Infrastructure as Code using the DNScale Terraform Provider.Read guideAutomationManaging DNS with DNSControlLearn how to manage your DNS zones and records as code using DNSControl with the DNScale provider. Define your entire DNS configuration in JavaScript.Read guideAutomationDNS for Cloud Infrastructure ā Best Practices and ArchitectureLearn cloud DNS best practices including service discovery, multi-cloud strategies, automation with Terraform, and TTL optimization for dynamic infrastructure.Read guideAutomationMulti-Provider DNS with Terraform & DNSControlDeploy DNS zones across DNScale and Hetzner DNS for redundancy using Terraform or DNSControl.Read guide
2 more resources in this section.
Performance
Understand anycast, latency, routing, and global DNS delivery.
PerformanceWhat is an Anycast DNS Network?Learn how anycast networking works, why it matters for DNS, and how it delivers low-latency, resilient name resolution worldwide.Read guidePerformanceAnycast DNS vs Unicast DNS ā Which Is Better for Your Domain?Compare anycast and unicast DNS routing to understand which approach delivers better performance, resilience, and DDoS protection for your domain.Read guidePerformanceWhat is Anycast DNS? A Plain-Language GuideAnycast DNS explained from the ground up ā what it is, why it matters, how BGP routing makes one IP reachable from many places, and why every modern DNS provider runs it.Read guidePerformanceDNS Network Performance MonitoringHow DNScale measures real-time DNS response times from independent RIPE Atlas probes across backbone and last-mile networks worldwide.Read guide
3 more resources in this section.
DNS Fundamentals
Start with the core concepts behind zones, TTLs, delegation, and resolution.
FundamentalsManaged DNS vs Self-Hosted DNS ā Pros, Cons, and When to Choose EachCompare managed DNS services with self-hosted DNS servers. Understand the trade-offs in cost, complexity, security, and reliability to decide which approach fits your infrastructure.Read guideFundamentalsPrimary DNS vs Secondary DNS ā Redundancy and Zone TransfersUnderstand the difference between primary and secondary DNS servers, how zone transfers (AXFR/IXFR) keep them in sync, and how to build a redundant DNS infrastructure.Read guideFundamentalsNXDOMAIN Errors ā What They Mean and How to Fix ThemLearn what NXDOMAIN means, why your DNS query returned 'name does not exist', and how to diagnose and fix common causes including typos, missing records, propagation lag, and DNSSEC validation failures.Read guideFundamentalsSERVFAIL Errors ā Causes and FixesLearn what SERVFAIL means, why DNS resolvers return it, and how to diagnose and fix the most common causes including DNSSEC validation failures, broken delegation, and authoritative server problems.Read guide
16 more resources in this section.
DNS Record Guides
Reference guides for the DNS record types you configure most often.
RecordsDNS NS Record Explained ā Nameserver DelegationLearn how NS records delegate DNS authority to nameservers, how glue records prevent circular dependencies, and how to configure nameserver delegation for subdomains.Read guideRecordsCNAME Records ExplainedUnderstand how CNAME records work, their limitations, and when to use them. Includes examples for the DNScale dashboard and API.Read guideRecordsCNAME vs A RecordUnderstand the differences between CNAME and A records, when to use each, and how to choose the right DNS record type for your domain setup.Read guideRecordsDNS Record Types - Complete Guide to Supported RecordsA comprehensive guide to all DNS record types supported by DNScale, including A, AAAA, CNAME, MX, TXT, SRV, NS, PTR, CAA, TLSA, SSHFP, HTTPS, SVCB, and ALIAS records.Read guide
13 more resources in this section.
Security & Resilience
Protect domains from DNS attacks, spoofing, outages, and misconfiguration.
SecurityWhat Is a DDoS Attack? Types, Impact, and DNS ProtectionLearn what DDoS attacks are, how volumetric, protocol, and application-layer attacks work, and how anycast DNS networks protect your infrastructure.Read guideSecurityWhat is DNSSEC? A Plain-Language Guide to DNS SecurityDNSSEC explained from first principles ā what it is, why it exists, how it works at a high level, and when you should turn it on for your domain.Read guideSecurityDNS Amplification Attacks Explained ā How They Work and How to Prevent ThemUnderstand how DNS amplification attacks exploit open resolvers and spoofed IPs to generate massive traffic floods, and learn the prevention techniques that stop them.Read guideSecurityHow DNSSEC Works ā KSK, ZSK, DS, DNSKEY, RRSIG, NSEC ExplainedA walkthrough of the DNSSEC chain of trust: how KSK and ZSK signing keys, DS records, DNSKEY records, RRSIG signatures, and NSEC/NSEC3 work together to authenticate DNS answers.Read guide
12 more resources in this section.
Email & Certificates
Configure mail authentication, TLS certificates, CAA, DANE, and DNS-01 flows.
Email & TLSLet's Encrypt DNS-01 Challenges with DNScaleAutomate Let's Encrypt certificate issuance and renewal with DNS-01 challenges using DNScale. Works for wildcard certificates, edge-proxied origins, and servers with no public port 80.Read guideEmail & TLSDNS over TLS (DoT) Explained ā Encrypted DNS on Port 853DNS over TLS explained ā what RFC 7858 actually does, how it differs from DoH and plain DNS, support across operating systems, and where ADoT (authoritative DoT) is heading.Read guideEmail & TLSBIMI Record Guide ā Brand Logos in Email InboxesBIMI (Brand Indicators for Message Identification) explained ā what it does, the DMARC and VMC prerequisites, how to format the SVG logo, the BIMI DNS record syntax, and a step-by-step deployment plan.Read guideEmail & TLSMTA-STS and TLS-RPT Guide - Enforce Encrypted Email DeliveryLearn how MTA-STS and TLS-RPT protect inbound SMTP delivery, which DNS records they require, how the HTTPS policy file works, and how to deploy without breaking mail.Read guide
7 more resources in this section.
Troubleshooting
Diagnose cache, propagation, resolver, and connectivity problems.
TroubleshootingWhat is WHOIS? Domain Registration Data ExplainedLearn what WHOIS is, how it works, the impact of GDPR on domain privacy, and how RDAP is replacing WHOIS as the modern standard for registration data lookup.Read guideTroubleshootingdig command tutorial ā 30 worked examples for DNS troubleshootingMaster the dig command for DNS diagnostics. 30 worked examples covering every common record type, +trace, +short, +cd for DNSSEC, AXFR zone transfers, EDNS, batch queries, and real-world troubleshooting recipes.Read guideTroubleshootingDNS Troubleshooting ā A Symptom-First GuideA symptom-first guide to diagnosing DNS issues ā site won't load, email bouncing, NXDOMAIN, SERVFAIL, intermittent failures ā with the dig and nslookup commands that prove what's broken.Read guideTroubleshootingFix: DNS_PROBE_FINISHED_NO_INTERNETLearn what the DNS_PROBE_FINISHED_NO_INTERNET error means and how to fix it on Windows, macOS, Linux, and Chrome with step-by-step solutions.Read guide
2 more resources in this section.
DNScale Platform
Learn the product workflows behind zones, accounts, billing, and protected records.
PlatformHow to Close Your AccountLearn how to permanently close your DNScale account, what happens to your data, and how to resolve outstanding invoices before closing.Read guidePlatformHow to Update Your Payment MethodLearn how to update your credit card, change your default payment method, or update billing information on your DNScale account.Read guidePlatformMulti-User Accounts and Zone Access ControlLearn how to invite team members to your DNScale account, assign roles, and control which DNS zones each user can access.Read guidePlatformPaid Plans vs Pay As You GoUnderstand the differences between DNScale's subscription plans and Pay As You Go pricing, and find out which option suits your needs best.Read guide
2 more resources in this section.