HOW DNSREACH WORKS

How DNS propagation works.

DNSReach compares what public recursive resolvers currently know with what a domain’s authoritative nameservers publish.

01

Enter a DNS name

Choose a record type and enter the domain, hostname, service name or IP address expected by that record.

02

Query DNS sources

DNSReach checks trusted public resolvers directly and discovers up to four authoritative nameservers.

03

Compare answers

Results stream onto the page as each source responds, without waiting for the slowest resolver.

Public versus authoritative DNS

Authoritative nameservers publish the domain owner’s current DNS zone. Public recursive resolvers answer users and applications, often from a cached copy. After a DNS change, authoritative servers may show the new value while some recursive resolvers still return an older value until its cache expires.

Understanding the colors

Green means the source returned records. Red means no record was found or the query failed. Amber means a successful answer differs from the authoritative consensus, or from the majority when no authoritative answer is available.

What the map represents

Map markers identify public DNS provider organizations. They do not claim that each query originated in the marker’s country. All native DNS requests originate from the DNSReach server, while the public providers may route those requests through nearby anycast infrastructure.

Run a DNS check →