Skip to content

Knowledge Base

Diagnosing common DNS problems

Start with the authoritative records instead of repeatedly clearing browser caches.

dig +trace example.com
dig @1.1.1.1 host.example.com A
dig @1.1.1.1 host.example.com AAAA
  • NXDOMAIN: the queried name does not exist in the answering DNS view.
  • SERVFAIL: commonly indicates broken delegation, DNSSEC, or an authoritative-server failure.
  • Correct address but wrong site: inspect the web server’s virtual-host configuration and TLS certificate.
  • Some users reach an old address: wait for the previous TTL and check whether multiple authoritative servers agree.

Remove an AAAA record if the application is not actually reachable over IPv6; otherwise dual-stack clients can appear intermittently broken.

Please rate this article to help us improve our Knowledge Base.

0 0