DNS

How DNS Resolution Actually Works: From Browser to Authoritative Server Follow a DNS lookup from your browser through the recursive resolver, root, TLD and authoritative servers. A deep, step-by-step look at how DNS really resolves.
Understanding the SOA Record: Every Field (Serial, Refresh, Retry, Expire, Minimum) Explained The SOA record controls your zone’s behaviour. Learn what every field — serial, refresh, retry, expire and minimum — does and how to set them correctly.
DNS Record Types Explained: A, AAAA, CNAME, MX, TXT, SRV, NS, CAA and More A deep reference to the DNS record types you’ll actually use — A, AAAA, CNAME, MX, TXT, SRV, NS, CAA, PTR and SOA — what each does and when to reach for it.
TTL Strategy: Setting DNS TTLs for Speed, Failover, and Painless Migrations TTL controls how long DNS answers are cached. Learn how to set TTLs for performance, fast failover and zero-downtime migrations — and the trade-offs of each.
How to Use dig for Deep DNS Troubleshooting (With Real Examples) dig is the definitive DNS troubleshooting tool. Learn how to query records, trace the full delegation, target specific resolvers and read every part of the output.
What Is DNSSEC and How It Protects Your Domain from Spoofing DNSSEC adds cryptographic signatures to DNS so answers can’t be forged. Learn what DNSSEC is, how the chain of trust works, and what it does and doesn’t protect.
How to Enable and Manage DNSSEC, Including Key Rollovers (KSK/ZSK) Enabling DNSSEC is more than a switch. Learn the roles of KSK and ZSK keys, how to publish the DS record, and how to roll keys without breaking your domain.
SPF, DKIM, and DMARC Explained: The DNS Records That Fix Email Deliverability SPF, DKIM and DMARC are the three DNS records that prove your email is legitimate. Learn what each does, how they work together, and why they fix deliverability.
How to Build a Correct SPF Record (and Avoid the 10-Lookup Limit) SPF has a hard limit of 10 DNS lookups — exceed it and SPF fails. Learn how to build a correct SPF record, count your lookups, and flatten when you must.
How to Set Up DKIM Signing and Publish the DNS Key DKIM cryptographically signs your outgoing mail. Learn how DKIM signing works, how to generate keys, publish the public key in DNS, and verify it’s working.
How to Deploy DMARC: From p=none to Full Enforcement DMARC tells receivers what to do with mail that fails authentication. Learn how to roll out DMARC safely — from monitoring with p=none to full reject enforcement.
CNAME vs ALIAS vs ANAME: Pointing Your Root Domain Correctly You can’t use a CNAME at your root domain — but ALIAS and ANAME records solve it. Learn the difference and how to point your apex at a hostname correctly.
Why a CNAME at the Zone Apex Breaks (and What to Use Instead) Putting a CNAME on your root domain breaks mail and delegation. Learn exactly why the DNS standard forbids it, and the correct records to use at the apex.
Glue Records Explained: How Custom Nameservers Actually Resolve If your nameserver lives inside the domain it serves, resolution hits a chicken-and-egg loop. Learn how glue records break that loop and why they’re essential.
How to Set Up Custom (Vanity) Nameservers Correctly Want ns1.yourdomain.com instead of your host’s nameservers? Learn how to set up custom vanity nameservers correctly — glue, A records and delegation — step by step.
Understanding DNS Propagation: Why Changes Take Time and How to Verify “DNS propagation” is really about caching and TTLs. Learn why DNS changes take time, what actually happens, and how to verify a change has taken effect worldwide.
Anycast DNS Explained: How One IP Serves the Whole World How can one IP address respond from dozens of countries at once? Learn how anycast DNS works, why it’s fast and resilient, and where it’s used.
GeoDNS and Latency-Based Routing: Serving Users the Nearest Server GeoDNS returns different answers based on where a user is, sending them to the closest server. Learn how it works, its limits, and how EDNS Client Subnet helps.
Split-Horizon DNS: Different Answers for Internal and External Clients Split-horizon DNS returns different answers to internal and external clients — private IPs inside, public IPs outside. Learn how it works and when to use it.
DNS Failover and Health Checks: Staying Up When a Server Dies DNS failover reroutes traffic away from a dead server automatically. Learn how health checks drive it, why low TTLs are essential, and what its limits are.
MX Records and Mail Routing: Priorities, Backup MX, and Null MX Explained MX records tell the world where your email goes. Learn how MX priorities work, what a backup MX really does, and when to use a Null MX record.
CAA Records: Controlling Which CAs Can Issue Certificates for Your Domain A CAA record tells the world which certificate authorities may issue SSL certificates for your domain. Learn how CAA works and how to set it up safely.
Reverse DNS (PTR Records): Why Your Mail Server Needs One Reverse DNS maps an IP back to a hostname — and mail servers without it get rejected. Learn how PTR records work, who controls them, and how to set one up.
Zone Transfers Explained: AXFR, IXFR, and Primary/Secondary DNS Zone transfers keep secondary DNS servers in sync with the primary. Learn how AXFR and IXFR work, the role of NOTIFY and TSIG, and why you must restrict transfers.
How to Set Up Secondary (Slave) DNS for Redundancy One nameserver is a single point of failure. Learn how to set up secondary (slave) DNS — zone transfers, NOTIFY, NS records and glue — for resilient DNS.
DNS over HTTPS (DoH) and DNS over TLS (DoT): Encrypted Lookups Explained Traditional DNS queries travel in plain text. Learn how DNS over HTTPS and DNS over TLS encrypt your lookups, how they differ, and how they relate to DNSSEC.
Wildcard DNS Records: When to Use Them and the Traps to Avoid A wildcard DNS record answers for any subdomain you haven’t defined. Learn when wildcards are useful, and the subtle traps — precedence, MX and CNAME — to avoid.
Negative Caching and NXDOMAIN: How Failed Lookups Get Cached When a name doesn’t exist, that “no” gets cached too. Learn what NXDOMAIN means, how negative caching works, and why a new record can seem slow to appear.
DNS Amplification and Cache Poisoning: How the Attacks Work and How to Defend Two major DNS attacks — amplification and cache poisoning — threaten availability and integrity. Learn conceptually how each works and the defences that stop them.
How to Migrate DNS to a New Provider with Zero Downtime Moving DNS providers without breaking your site or email takes a careful order of operations. Learn the step-by-step, zero-downtime DNS migration process.
How to Add a TXT Record for Domain Verification in cPanel Need to verify your domain for Google, Meta or email? Learn how to add a TXT record in cPanel using the DNS Zone Editor, step by step.
How to Set Up a Wildcard DNS Record in cPanel Point every subdomain to one place at once. Learn how to create a wildcard DNS record in cPanel with the Zone Editor, plus when to use one.
What Is DNSSEC and How to Enable It for Your Domain DNSSEC protects your domain from DNS spoofing. Learn what DNSSEC does, whether you need it, and how to enable it for your VernalWeb domain.
How to Verify Your Domain with Google Search Console Get your site into Google Search Console the right way. Learn how to verify domain ownership with a DNS TXT record via cPanel, step by step.
How to Point a Domain to VernalWeb Using A Records (Without Changing Nameservers) Want to host with us but keep DNS where it is? Learn how to point your domain to VernalWeb using an A record instead of changing nameservers.
What Is DNS and How Does It Work? DNS is the internet’s address book. Learn what DNS is, how it turns domain names into IP addresses, and the common record types explained simply.
What Are Nameservers and How Do They Work? Nameservers tell the internet where your website lives. Learn what nameservers are, how they work, and how to point your domain using them.
How to use DNS Zone Editor in cPanel DNS Zone Editor is used to add, delete or update any DNS record for the domain. You can do all of them in a single place with Zone Editor. Let’s see how to use the DNS Zone Editor in cPanel. Step 1:…
How to Add SPF, DKIM and DMARC Records SPF, DKIM, and DMARC are used to fight against spam. To ensure your emails are delivered properly to the inbox & you won’t have issues with e-mail spoofing, you need to setup SPF, DKIM, and DMARC…
How to add an A record with the DNS Zone Editor in cPanel https://www.youtube.com/watch?v=Ginu3ecQkVc We assume you’ve already logged in to cPanel, and are starting on the home screen. Now let’s learn how to add an A record with the DNS Zone Editor. Click…
How to add an MX entry in cPanel https://www.youtube.com/watch?v=T5w3uCUtYTQ We assume you’ve already logged in to cPanel, and are starting on the home screen. Now let’s learn how to add an MX entry. Click the MX Entry icon. Setting…
How do I create an A Record in my cPanel account? A record is a great feature of DNS (Domain Name System). To point your domain to any specific address, you can create A record in your cPanel account. Let’s learn how create an A record in cPanel. To…
How to create CNAME records in cPanel cPanel is being used by millions of users now a days. Creating a CNAME Record is not a common case that happens usually, but sometimes advanced cPanel Users need to create CNAME Records. CNAME is a…
What is an SOA Record? An SOA Record is short for Start of Authority. What does that mean? The SOA Record specifies authoritative information about a DNS zone, including the primary name server, the email of the domain…