{"id":895,"date":"2026-06-26T12:40:28","date_gmt":"2026-06-26T12:40:28","guid":{"rendered":"https:\/\/www.kailashcloud.com\/blog\/?p=895"},"modified":"2026-06-26T12:40:31","modified_gmt":"2026-06-26T12:40:31","slug":"what-is-dns-guide","status":"publish","type":"post","link":"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/","title":{"rendered":"What Is DNS? How DNS Works, DNS Records, Nameservers &amp; Website Hosting (The Complete Beginner&#8217;s Guide 2026)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Everything that happens after someone types your domain name into a browser, from DNS and nameservers to web hosting and HTTPS, explained step by step in a way that&#8217;s easy to understand.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Quick_Answer_What_Is_DNS\" >Quick Answer: What Is DNS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Introduction\" >Introduction<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Key_DNS_terms_youll_see_throughout_this_guide\" >Key DNS terms you&#8217;ll see throughout this guide<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Why_DNS_Exists\" >Why DNS Exists<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#It_wasnt_always_this_way\" >It wasn&#8217;t always this way<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Why_DNS_is_more_than_a_lookup_system\" >Why DNS is more than a lookup system?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DNS_Explained\" >DNS Explained<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Domain_DNS_and_web_hosting_are_different_things\" >Domain, DNS, and web hosting are different things<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_DNS_Works\" >How DNS Works<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DNS_Lookup_Process\" >DNS Lookup Process<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Step_1_Your_browser_checks_its_cache\" >Step 1: Your browser checks its cache<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Step_2_The_request_goes_to_a_DNS_resolver\" >Step 2: The request goes to a DNS resolver<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Step_3_The_resolver_checks_the_DNS_hierarchy\" >Step 3: The resolver checks the DNS hierarchy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Step_4_The_authoritative_nameserver_returns_the_answer\" >Step 4: The authoritative nameserver returns the answer<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Step_5_Your_browser_connects_to_the_website\" >Step 5: Your browser connects to the website<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_Is_a_Nameserver\" >What Is a Nameserver?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Why_nameservers_matter\" >Why nameservers matter<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Connecting_a_domain_to_your_hosting\" >Connecting a domain to your hosting<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#A_common_mistake\" >A common mistake<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_to_change_nameservers\" >How to change nameservers<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DNS_Records_Explained\" >DNS Records Explained<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Every_DNS_record_has_a_specific_job\" >Every DNS record has a specific job<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#A_Record\" >A Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#AAAA_Record\" >AAAA Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#CNAME_Record\" >CNAME Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#MX_Record\" >MX Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#TXT_Record\" >TXT Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#SPF_Record\" >SPF Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DKIM_Record\" >DKIM Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DMARC_Record\" >DMARC Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#NS_Record\" >NS Record<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#SRV_Record\" >SRV Record<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DNS_Propagation_Why_DNS_Changes_Arent_Instant\" >DNS Propagation: Why DNS Changes Aren&#8217;t Instant<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Why_does_DNS_propagation_happen\" >Why does DNS propagation happen?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_Long_Does_DNS_Propagation_Take\" >How Long Does DNS Propagation Take?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#DNS_Security\" >DNS Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Common_DNS_security_threats\" >Common DNS security threats<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_to_protect_your_DNS\" >How to protect your DNS<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Using_Third-Party_DNS_Providers_Cloudflare_and_Others\" >Using Third-Party DNS Providers (Cloudflare and Others)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_it_works\" >How it works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-41\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Proxied_vs_DNS_Only_records\" >Proxied vs. DNS Only records<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-42\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Website_Migration_DNS_Checklist\" >Website Migration DNS Checklist<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-43\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Before_you_change_DNS\" >Before you change DNS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-44\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#During_the_migration\" >During the migration<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-45\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#After_the_migration\" >After the migration<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-46\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-47\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_is_DNS\" >What is DNS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-48\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_does_DNS_work\" >How does DNS work?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-49\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Whats_the_difference_between_DNS_and_a_nameserver\" >What&#8217;s the difference between DNS and a nameserver?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-50\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_are_the_most_common_DNS_record_types\" >What are the most common DNS record types?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-51\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Whats_the_difference_between_an_A_record_and_a_CNAME\" >What&#8217;s the difference between an A record and a CNAME?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-52\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_long_does_DNS_propagation_take\" >How long does DNS propagation take?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-53\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_is_TTL_in_DNS\" >What is TTL in DNS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-54\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#How_do_I_connect_my_domain_to_my_hosting\" >How do I connect my domain to my hosting?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-55\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Why_did_my_email_stop_working_after_changing_DNS\" >Why did my email stop working after changing DNS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-56\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_is_DNSSEC\" >What is DNSSEC?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-57\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#What_is_DNS_hijacking\" >What is DNS hijacking?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-58\" href=\"https:\/\/www.kailashcloud.com\/blog\/what-is-dns-guide\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Quick_Answer_What_Is_DNS\"><\/span>Quick Answer: What Is DNS?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Domain Name System (DNS) is the internet&#8217;s address book that translate easy to remember domain names, like <code><a href=\"https:\/\/google.com\" target=\"_blank\" rel=\"noopener\">google.com<\/a><\/code> into the numeric IP address like <code>142.251.211.110<\/code> <a href=\"https:\/\/dnschecker.org\/ip-location.php?ip=192.178.218.100\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a>computers actually use to communicate with each other. Every time you load a website, send an email, or open an app, DNS performs this lookup behind the scenes, usually in just a few milliseconds. Without DNS, you&#8217;d have to remember long strings of numbers instead of simple website names.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before we see how DNS works step by step, let&#8217;s quickly understand the four pieces involved.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Domain name<\/strong> is the web address people type into their browser, such as <code><a href=\"https:\/\/google.com\" target=\"_blank\" rel=\"noopener\">google.com<\/a><\/code>.<\/li>\n\n\n\n<li><strong>DNS<\/strong> is the system that translates that domain name into an IP address.<\/li>\n\n\n\n<li><strong>Nameservers<\/strong> store the DNS records for your domain and answer DNS queries.<\/li>\n\n\n\n<li><strong>Web hosting<\/strong> is the server where your website&#8217;s files, images, and databases are stored.<\/li>\n\n\n\n<li><strong>IP address<\/strong> is the numerical address computers use to find and communicate with your website.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Here&#8217;s the easiest way to remember it:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Your domain name is the address people know, your web hosting is where your website lives, and DNS is the system that connects them.<\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"539\" src=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-1024x539.png\" alt=\"what is dns\" class=\"wp-image-908\" srcset=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-1024x539.png 1024w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-300x158.png 300w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-768x404.png 768w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-1536x808.png 1536w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-528x278.png 528w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-1056x556.png 1056w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-820x432.png 820w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram-1240x653.png 1240w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/what-is-dns-diagram.png 1729w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">The five pieces that turn a domain name into a live website.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Introduction\"><\/span>Introduction<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you&#8217;ve ever registered a domain, changed web hosts, set up a <a href=\"https:\/\/www.kailashcloud.com\/google-workspace-in-nepal\">business email<\/a>, or pointed a website to a new server, you&#8217;ve already interacted with DNS, even if you didn&#8217;t realize it. It&#8217;s one of the most important parts of the internet, yet it&#8217;s also one of the least understood.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most people don&#8217;t think about DNS until something goes wrong. A website suddenly stops loading, emails disappear after a migration, or a small change to a DNS record causes hours of confusion. In many cases, the problem isn&#8217;t the website or the hosting provider. It&#8217;s simply that DNS isn&#8217;t doing what you expected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The good news is that DNS isn&#8217;t as complicated as it first appears. Once you understand how domain names, nameservers, DNS records, IP addresses, and web hosting fit together, the whole process starts to make sense.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This guide takes you through everything step by step. We&#8217;ll start with the basics, then follow the complete journey from typing a domain name into your browser to loading a live website. Along the way, you&#8217;ll learn how DNS records work, what nameservers actually do, why DNS propagation takes time, how website migrations affect DNS, and how to troubleshoot common problems with confidence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Whether you&#8217;re building your first website, managing a business domain, or simply curious about how the internet works behind the scenes, this guide will give you a practical understanding of DNS without assuming you already have a networking background.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Key_DNS_terms_youll_see_throughout_this_guide\"><\/span>Key DNS terms you&#8217;ll see throughout this guide<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You don&#8217;t need to memorize these yet. They&#8217;ll become much clearer once you see a DNS lookup in action.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>IP address<\/strong> \u2013 The numerical address of a server that computers use to communicate.<\/li>\n\n\n\n<li><strong>Domain name<\/strong> \u2013 A human-friendly name such as <code>example.com<\/code> that points to an IP address.<\/li>\n\n\n\n<li><strong>DNS record<\/strong> \u2013 A rule that tells DNS what to do, such as pointing a domain to a website or directing email to a mail server.<\/li>\n\n\n\n<li><strong>Nameserver<\/strong> \u2013 The server that stores your domain&#8217;s DNS records and answers DNS requests.<\/li>\n\n\n\n<li><strong>DNS resolver<\/strong> \u2013 The server that searches for the correct DNS information on behalf of your browser.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_DNS_Exists\"><\/span>Why DNS Exists<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Computers don&#8217;t understand domain names like <code><a href=\"https:\/\/cloudflare.com\" target=\"_blank\" rel=\"noopener\">cloudflare.com<\/a><\/code> or <code><a href=\"https:\/\/facebook.com\" target=\"_blank\" rel=\"noopener\">facebook.com<\/a><\/code>. They communicate using <strong>IP addresses<\/strong>, which are numerical identifiers such as <code>142.250.x.x<\/code> (IPv4) or <code>2607:f8b0:4005:805::200e<\/code> (IPv6).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That creates a simple problem: people are good at remembering names, while computers only understand numbers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without DNS, every website you wanted to visit would require you to remember its IP address. Imagine trying to memorize a different string of numbers for your bank, your email provider, your favorite online store, and every other website you use. The internet would be frustrating to use.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1024x576.png\" alt=\"Comparison of typing a hard-to-remember IP address versus an easy domain name\" class=\"wp-image-909\" srcset=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1024x576.png 1024w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-300x169.png 300w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-768x432.png 768w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1536x864.png 1536w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-528x297.png 528w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1056x594.png 1056w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-820x461.png 820w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1640x923.png 1640w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers-1240x698.png 1240w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/why-dns-exists-names-vs-numbers.png 1672w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">DNS lets you remember names instead of numbers<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">DNS solves this problem by acting as a translator. When you type a domain name into your browser, DNS looks up the correct IP address and sends your browser to the right server. This happens automatically in the background, usually within milliseconds.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"It_wasnt_always_this_way\"><\/span><strong>It wasn&#8217;t always this way<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Before DNS was introduced in the early 1980s, computers relied on a manually maintained file called <code><strong>HOSTS.TXT<\/strong><\/code>. It contained a list of computer names and their corresponding IP addresses. As the internet grew, keeping that file updated became impossible, which led to the creation of the <strong>Domain Name System (DNS)<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Today, DNS is a distributed system with millions of DNS servers working together to answer billions of DNS lookups every day.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_DNS_is_more_than_a_lookup_system\"><\/span>Why DNS is more than a lookup system?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNS doesn&#8217;t just make website names easier to remember. It also gives website owners flexibility.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because your domain name is separate from your server&#8217;s IP address, you can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Move your website to a new hosting provider without changing your domain name.<\/li>\n\n\n\n<li>Use one provider for your website and another for email.<\/li>\n\n\n\n<li>Send visitors to the closest server for faster loading.<\/li>\n\n\n\n<li>Redirect traffic to a backup server if your main server goes offline.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This separation between names and server addresses is one of the reasons the modern internet is reliable, scalable, and easy to manage.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DNS_Explained\"><\/span>DNS Explained<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>Domain Name System (DNS)<\/strong> is a global system that translates human-friendly domain names into the IP addresses that computers use to communicate. Every time you open a website, send an email, or use an online app, DNS works behind the scenes to find the correct destination.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DNS isn&#8217;t owned by one company or stored on one server. Instead, it&#8217;s a distributed system made up of millions of DNS servers around the world that work together to answer one simple question:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;Which IP address belongs to this domain name?&#8221;<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Domain_DNS_and_web_hosting_are_different_things\"><\/span>Domain, DNS, and web hosting are different things<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">One of the biggest sources of confusion is that people often treat a <strong>domain name<\/strong>, <strong>DNS<\/strong>, and <strong>web hosting<\/strong> as if they&#8217;re the same service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These are separate services. You can buy all three from one company or use different providers for each. As long as they&#8217;re configured correctly, they&#8217;ll work together.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Domain name<\/strong> is the web address people type into their browser.<\/li>\n\n\n\n<li><strong>Web hosting<\/strong> is where your website&#8217;s files, images, and databases are stored.<\/li>\n\n\n\n<li><strong>DNS<\/strong> is the technology that connects your domain name to your hosting server by translating the domain into an IP address, allowing visitors to reach your website.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you&#8217;re planning to launch a website, start by <strong><a href=\"https:\/\/www.kailashcloud.com\/domains\">registering a domain name in Nepal<\/a><\/strong>, then choose the <strong><a href=\"https:\/\/www.kailashcloud.com\/web-hosting\">best web hosting in Nepal<\/a><\/strong> that fits your needs. Once your domain, DNS, and hosting are connected, visitors can access your website without needing to know its IP address.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_DNS_Works\"><\/span>How DNS Works<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now that you know what DNS is, let&#8217;s see what happens behind the scenes when you visit a website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Suppose you type <strong><code><a href=\"https:\/\/cloudflare.com\" target=\"_blank\" rel=\"noopener\">cloudflare.com<\/a><\/code><\/strong> into your browser and press <strong>Enter<\/strong>. Within milliseconds, your computer and several DNS servers work together to find the correct IP address before your browser can load the website.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DNS_Lookup_Process\"><\/span>DNS Lookup Process<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"768\" src=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-1024x768.png\" alt=\"Flowchart of the DNS lookup process from browser to authoritative nameserver\" class=\"wp-image-910\" srcset=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-1024x768.png 1024w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-300x225.png 300w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-768x576.png 768w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-528x396.png 528w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-1056x792.png 1056w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-820x615.png 820w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart-1240x930.png 1240w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/how-dns-works-lookup-flowchart.png 1448w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">A DNS lookup, start to finish, in five steps.<\/figcaption><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Step_1_Your_browser_checks_its_cache\"><\/span>Step 1: Your browser checks its cache<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Before asking anyone else, your browser checks whether it already knows the website&#8217;s IP address from a recent visit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If it does, the website loads immediately without performing another DNS lookup.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Step_2_The_request_goes_to_a_DNS_resolver\"><\/span>Step 2: The request goes to a DNS resolver<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">If the browser doesn&#8217;t have the answer, it sends the request to a <strong>DNS resolver<\/strong>. This is usually provided by your internet service provider, although many people use public DNS services like Cloudflare or Google Public DNS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The resolver&#8217;s job is simple: find the correct IP address for the domain.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Step_3_The_resolver_checks_the_DNS_hierarchy\"><\/span>Step 3: The resolver checks the DNS hierarchy<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">If the resolver doesn&#8217;t already know the answer, it begins asking other DNS servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It follows the same path every DNS lookup uses:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Root nameserver<\/li>\n\n\n\n<li>Top-Level Domain (TLD) nameserver<\/li>\n\n\n\n<li>Authoritative nameserver<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Each server points the resolver closer to the correct answer until it reaches the server that stores your domain&#8217;s DNS records.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Step_4_The_authoritative_nameserver_returns_the_answer\"><\/span>Step 4: The authoritative nameserver returns the answer<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The authoritative nameserver stores your domain&#8217;s DNS records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When asked for the IP address of <strong><a href=\"https:\/\/google.com\" target=\"_blank\" rel=\"noopener\">google.com<\/a><\/strong>, it returns the correct record, such as:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code><strong>google.com \u2192 A records \u2192 142.251.211.110<\/strong><\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This server is called <strong>authoritative<\/strong> because it provides the official answer for the domain.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Step_5_Your_browser_connects_to_the_website\"><\/span>Step 5: Your browser connects to the website<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The DNS resolver sends the IP address back to your browser.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your browser then connects to that IP address, requests the website from the hosting server, and displays the page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From your perspective, all of this usually happens in a fraction of a second.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_Is_a_Nameserver\"><\/span>What Is a Nameserver?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A <strong>nameserver<\/strong> is a server that stores your domain&#8217;s DNS records and answers DNS requests. When someone visits your website, DNS eventually reaches your domain&#8217;s authoritative nameserver to find the correct records, such as your website&#8217;s IP address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most domains use at least two nameservers for reliability. They usually look something like this:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>ns1.kailashcloud.com<br>ns2.kailashcloud.com<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If one nameserver becomes unavailable, the other can continue answering DNS queries.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_nameservers_matter\"><\/span>Why nameservers matter<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Your nameservers determine who manages your DNS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>If your nameservers point to your web hosting provider, your DNS records are managed there.<\/li>\n\n\n\n<li>If they point to Cloudflare, you manage your DNS records in Cloudflare.<\/li>\n\n\n\n<li>If they point to your domain registrar, you manage them through your registrar&#8217;s DNS panel.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The important thing to remember is that only the provider hosting your nameservers can answer DNS queries for your domain.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Connecting_a_domain_to_your_hosting\"><\/span>Connecting a domain to your hosting<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">There are two common ways to connect a domain to a website.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Method<\/th><th>What you change<\/th><th>Best for<\/th><\/tr><\/thead><tbody><tr><td><strong>Change nameservers<\/strong><\/td><td>Replace your registrar&#8217;s nameservers with those provided by your hosting company or DNS provider.<\/td><td>When you want your web host (or a DNS provider) to manage everything<\/td><\/tr><tr><td><strong>Edit DNS records<\/strong><\/td><td>Keep your existing nameservers and update records such as A, AAAA, or CNAME.<\/td><td>Your DNS is already where you want it and you just need to point or tweak a record<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"A_common_mistake\"><\/span>A common mistake<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">A frequent source of confusion is editing DNS records in the wrong dashboard.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, if your nameservers point to Cloudflare, changing DNS records at your domain registrar won&#8217;t affect your website because your registrar is no longer responsible for your DNS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Always edit DNS records where your current nameservers are hosted.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_change_nameservers\"><\/span>How to change nameservers<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Changing nameservers is straightforward:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Log in to your domain registrar.<\/li>\n\n\n\n<li>Open the DNS or Nameserver settings for your domain.<\/li>\n\n\n\n<li>Replace the existing nameservers with the new ones provided by your hosting or DNS provider.<\/li>\n\n\n\n<li>Save your changes.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">After saving, the changes begin propagating across the internet. Some users may see the new DNS information within minutes, while others may continue seeing the old records until cached information expires. We&#8217;ll explain DNS propagation in a later section.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DNS_Records_Explained\"><\/span>DNS Records Explained<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DNS records are the instructions that tell the internet what to do with your domain. They decide where your website is hosted, which server receives your email, how subdomains behave, and even whether services like <a href=\"https:\/\/workspace.google.com\/\" target=\"_blank\" rel=\"noopener\">Google Workspace<\/a> or <a href=\"https:\/\/www.office.com\" target=\"_blank\" rel=\"noopener\">Microsoft 365<\/a> can verify your domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Think of your domain as a contact in your phone. The contact&#8217;s name is easy to remember, but it can have multiple pieces of information attached to it, such as a phone number, email address, or home address. DNS records work in a similar way. Each record stores one specific piece of information about your domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, one record tells browsers where your website lives, while another tells email providers where to deliver your messages. Others help protect your domain from email spoofing or verify ownership for third-party services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without DNS records, your domain name would exist, but it wouldn&#8217;t know where to send visitors or email.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"768\" src=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-1024x768.png\" alt=\"Infographic showing common DNS records types and what each one controls\" class=\"wp-image-911\" srcset=\"https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-1024x768.png 1024w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-300x225.png 300w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-768x576.png 768w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-528x396.png 528w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-1056x792.png 1056w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-820x615.png 820w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic-1240x930.png 1240w, https:\/\/www.kailashcloud.com\/blog\/wp-content\/uploads\/2026\/06\/dns-records-overview-infographic.png 1448w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Each record stores one fact about your domain<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Every_DNS_record_has_a_specific_job\"><\/span>Every DNS record has a specific job<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Each DNS record serves a different purpose.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some records are essential for almost every website, while others are only needed for specific services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here&#8217;s a quick overview of the most common record types you&#8217;ll encounter.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>Record<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\"><strong>Purpose<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\"><strong>Common use<\/strong><\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>A<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Points a domain to an IPv4 address.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Connecting a website to hosting.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>AAAA<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Points a domain to an IPv6 address.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Supporting IPv6 visitors.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>CNAME<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Creates an alias for another name.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Pointing <code>www<\/code> to a subdomain <\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>MX<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Specifies which mail server receives email.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Business email services.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>TXT<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Stores text-based information.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Domain verification and email security.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>SPF<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">(A TXT record) authorizes mail senders<\/td><td class=\"has-text-align-left\" data-align=\"left\">Stopping spoofed email<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>DKIM<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">(A TXT record) signs your email<\/td><td class=\"has-text-align-left\" data-align=\"left\">Improving deliverability<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>DMARC<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">(A TXT record) sets email policy<\/td><td class=\"has-text-align-left\" data-align=\"left\">Protecting your domain from abuse<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>NS<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Specifies the authoritative nameservers.<\/td><td class=\"has-text-align-left\" data-align=\"left\">Delegating DNS management.<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\"><strong>SRV<\/strong><\/td><td class=\"has-text-align-left\" data-align=\"left\">Locates specific network services.<\/td><td class=\"has-text-align-left\" data-align=\"left\">VoIP, Microsoft services, and chat applications.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"A_Record\"><\/span>A Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An A record, short for Address record, maps a domain name to an IPv4 address. It&#8217;s the most fundamental record on the internet, the one that actually answers the question &#8220;where does this website live?&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Suppose you own the domain <strong><code>example.com<\/code><\/strong>, and your hosting provider has assigned your server the IPv4 address <strong><code>192.0.2.45<\/code><\/strong>.To make the site load, you create two records.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>@<\/td><td>A<\/td><td><code>192.0.2.45<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Now <code>example.com<\/code> resolve to your server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em><strong>Note:<\/strong> The <strong>TTL (Time to Live)<\/strong> value of <strong>3600<\/strong> means DNS resolvers can cache the record for <strong>3,600 seconds (1 hour)<\/strong> before checking for updates. A shorter TTL allows DNS changes to propagate more quickly, while a longer TTL reduces the number of DNS lookups and can improve performance.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"AAAA_Record\"><\/span>AAAA Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An AAAA record, said aloud as &#8220;quad-A,&#8221; does exactly what an A record does but for an IPv6 address, the newer and vastly larger address format the internet has been slowly moving toward for years.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>@<\/td><td>AAAA<\/td><td>2001:db8::8a2e:370:7334<\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">You usually add an AAAA alongside your A record rather than instead of it. Visitors on IPv6 networks use the AAAA, everyone else falls back to the A.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"CNAME_Record\"><\/span>CNAME Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A CNAME, the Canonical Name record, points one name to another name instead of to an IP. It&#8217;s an alias. When a resolver hits a CNAME it&#8217;s effectively told &#8220;don&#8217;t look here, go look up this other name instead,&#8221; and the lookup carries on from there.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The textbook use is pointing <code>www<\/code> at your root domain so the IP only lives in one place.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>www<\/td><td>CNAME<\/td><td><code>example.com<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"MX_Record\"><\/span>MX Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An MX record, short for Mail Exchange, tells the world which server receives email for your domain. Without a correctly configured MX record, emails won&#8217;t be delivered.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">MX records carry a priority number, and lower numbers are tried first, which is how you set up a backup mail server.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Priority<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>@<\/td><td>MX<\/td><td>10<\/td><td><code>mail.example.com<\/code><\/td><td>3600<\/td><\/tr><tr><td>@<\/td><td>MX<\/td><td>20<\/td><td><code>mail2.example.com<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Here mail tries <code>mail.example.com<\/code> first at priority 10 and only falls back to <code>mail2<\/code> at priority 20 if the first is unreachable.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"TXT_Record\"><\/span>TXT Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A <strong>TXT (Text) record<\/strong> stores text information associated with your domain. It&#8217;s commonly used for <strong>domain verification<\/strong> and <strong>email authentication<\/strong>, including <strong>SPF<\/strong>, <strong>DKIM<\/strong>, and <strong>DMARC<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>@<\/td><td>TXT<\/td><td><code>google-site-verification=Abc123\u2026<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this example, Google checks for the verification string in your DNS records to confirm that you own the domain.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"SPF_Record\"><\/span>SPF Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An <strong>SPF (Sender Policy Framework)<\/strong> record is a special <strong>TXT record<\/strong> that tells email providers which mail servers are allowed to send emails on behalf of your domain. It helps prevent spammers from sending fake emails using your domain name.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Value<\/strong><\/td><td><strong>TTL<\/strong><\/td><\/tr><tr><td>@<\/td><td>TXT<\/td><td><code>v=spf1 include:_spf.example.com ~all<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><code><strong>include:_spf.example.com<\/strong><\/code> authorizes Mail servers to send emails for your domain.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DKIM_Record\"><\/span>DKIM Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A <strong>DKIM (DomainKeys Identified Mail)<\/strong> record is a special <strong>TXT record<\/strong> that helps verify your outgoing emails are authentic. It stores a <strong>public key<\/strong> that receiving mail servers use to confirm that an email was sent by your domain and hasn&#8217;t been modified in transit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Example<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Name<\/th><th>Type<\/th><th>Value<\/th><th>TTL<\/th><\/tr><\/thead><tbody><tr><td><code>selector1._domainkey<\/code><\/td><td>TXT<\/td><td><code>v=DKIM1; k=rsa; p=MIGfMA0GCS...<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><code>selector1._domainkey<\/code><\/strong> is the selector provided by your email service.<\/li>\n\n\n\n<li><strong><code>p=<\/code><\/strong> contains the public key used to verify the email&#8217;s digital signature.<\/li>\n\n\n\n<li>If the signature is valid, recipients can trust that the email is genuine and hasn&#8217;t been altered.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DMARC_Record\"><\/span>DMARC Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A <strong>DMARC (Domain-based Message Authentication, Reporting, and Conformance)<\/strong> record is a special <strong>TXT record<\/strong> that works with <strong>SPF<\/strong> and <strong>DKIM<\/strong> to protect your domain from email spoofing. It tells receiving mail servers what to do if an email fails authentication and where to send authentication reports.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC records are always created on the <strong><code>_dmarc<\/code><\/strong> subdomain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Example<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Name<\/th><th>Type<\/th><th>Value<\/th><th>TTL<\/th><\/tr><\/thead><tbody><tr><td><code>_dmarc<\/code><\/td><td>TXT<\/td><td><code>v=DMARC1; p=quarantine; rua=mailto:reports@example.com<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><code>p=none<\/code><\/strong> monitors failed emails but doesn&#8217;t block them.<\/li>\n\n\n\n<li><strong><code>p=quarantine<\/code><\/strong> sends failed emails to the spam or junk folder.<\/li>\n\n\n\n<li><strong><code>p=reject<\/code><\/strong> blocks failed emails completely.<\/li>\n\n\n\n<li><strong><code>rua=<\/code><\/strong> specifies the email address that receives DMARC reports.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"NS_Record\"><\/span>NS Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An <strong>NS (Nameserver) record<\/strong> specifies which nameservers are responsible for managing the DNS records of a domain or subdomain. It tells the internet where to look for the authoritative DNS information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Example<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Name<\/th><th>Type<\/th><th>Value<\/th><th>TTL<\/th><\/tr><\/thead><tbody><tr><td><code>dev<\/code><\/td><td>NS<\/td><td><code>ns1.otherprovider.com<\/code><\/td><td>3600<\/td><\/tr><tr><td><code>dev<\/code><\/td><td>NS<\/td><td><code>ns2.otherprovider.com<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this example, the <strong><code>dev.example.com<\/code><\/strong> subdomain is delegated to another DNS provider. This means all DNS records under <strong><code>dev.example.com<\/code><\/strong> are managed by <strong><code>ns1.otherprovider.com<\/code><\/strong> and <strong><code>ns2.otherprovider.com<\/code><\/strong>, while the rest of <strong><code>example.com<\/code><\/strong> continues to use its existing nameservers.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"SRV_Record\"><\/span>SRV Record<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An <strong>SRV (Service) record<\/strong> specifies the <strong>hostname<\/strong> and <strong>port number<\/strong> for a particular service. It&#8217;s commonly used by services such as <strong>VoIP (SIP)<\/strong>, <strong>XMPP<\/strong>, and some Microsoft applications to locate the correct server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Example<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Name<\/th><th>Type<\/th><th>Priority<\/th><th>Weight<\/th><th>Port<\/th><th>Target<\/th><th>TTL<\/th><\/tr><\/thead><tbody><tr><td><code>_sip._tls<\/code><\/td><td>SRV<\/td><td>100<\/td><td>1<\/td><td>443<\/td><td><code>sip.example.com<\/code><\/td><td>3600<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In this example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Priority (100)<\/strong> determines which server is tried first (lower values have higher priority).<\/li>\n\n\n\n<li><strong>Weight (1)<\/strong> balances traffic between servers with the same priority.<\/li>\n\n\n\n<li><strong>Port (443)<\/strong> specifies the port where the service is running.<\/li>\n\n\n\n<li><strong>Target<\/strong> is the hostname that provides the service.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DNS_Propagation_Why_DNS_Changes_Arent_Instant\"><\/span>DNS Propagation: Why DNS Changes Aren&#8217;t Instant<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When you update a DNS record, the change doesn&#8217;t appear across the internet immediately. This delay is called <strong>DNS propagation<\/strong>. During this time, some people may see the new DNS record while others continue to see the old one.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_does_DNS_propagation_happen\"><\/span>Why does DNS propagation happen?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The internet uses <strong>DNS caching<\/strong> to speed up website lookups. Instead of asking your domain&#8217;s nameserver every time, DNS resolvers temporarily store (cache) DNS records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If a resolver has cached your old record, it will continue using that record until the cache expires even if you&#8217;ve already updated it. How long the cache lasts depends on the record&#8217;s <strong>TTL (Time to Live)<\/strong> value.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This allows DNS changes to spread much faster and reduces downtime during migrations.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_Long_Does_DNS_Propagation_Take\"><\/span>How Long Does DNS Propagation Take?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In most cases, DNS changes propagate within <strong>a few minutes to a few hours<\/strong>. However, it can sometimes take <strong>up to 24\u201348 hours<\/strong>, depending on:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The previous TTL value<\/li>\n\n\n\n<li>DNS resolver caching policies<\/li>\n\n\n\n<li>Your internet service provider (ISP)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em><strong>Tip:<\/strong> Don&#8217;t rely on your own browser to confirm DNS changes. Browsers and ISPs often cache DNS results. Instead, use <strong><a href=\"https:\/\/dnschecker.org\/\" target=\"_blank\" rel=\"noopener\">DNS Checker<\/a><\/strong> to see how your DNS records are resolving from dozens of locations around the world. This helps you determine whether the issue is propagation or a configuration error.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"DNS_Security\"><\/span>DNS Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Every time someone visits your website, sends you an email, or connects to one of your online services, DNS helps direct that request to the right destination.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because DNS sits at the beginning of almost every internet connection, it&#8217;s also a common target for attackers. If someone can manipulate your DNS settings, they may be able to redirect visitors to a fake website, intercept email, or make your website unavailable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The good news is that most DNS-related attacks are preventable with a few basic security practices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Common_DNS_security_threats\"><\/span>Common DNS security threats<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Here are some of the most common ways attackers target DNS.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td>Threat<\/td><td>What happens<\/td><td>Possible impact<\/td><\/tr><tr><td>DNS hijacking<\/td><td>Attacker changes your records or nameservers<\/td><td>Visitors sent to a fake site or email rerouted<\/td><\/tr><tr><td>DNS spoofing<\/td><td>A resolver stores incorrect DNS information.<\/td><td>Users are sent to the wrong IP address without realizing it.<\/td><\/tr><tr><td>DDoS on DNS<\/td><td>DNS servers are flooded with traffic.<\/td><td>Your domain may become unreachable.<\/td><\/tr><tr><td>Subdomain takeover<\/td><td>A DNS record points to an abandoned cloud service.<\/td><td>An attacker claims that service and gains control of the subdomain.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Fortunately, these attacks are relatively uncommon for most website owners. In practice, the biggest risks usually come from weak account security rather than sophisticated hacking techniques.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_protect_your_DNS\"><\/span>How to protect your DNS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You don&#8217;t need to be a security expert to keep your domain safe. Following these best practices will prevent most common DNS-related problems.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enable two-factor authentication (2FA)<\/li>\n\n\n\n<li>Use a strong, unique password<\/li>\n\n\n\n<li>Turn on domain lock<\/li>\n\n\n\n<li>Remove unused DNS records<\/li>\n\n\n\n<li>Add a CAA (Certification Authority Authorization) record<\/li>\n\n\n\n<li>Enable DNSSEC if your provider supports it<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Using_Third-Party_DNS_Providers_Cloudflare_and_Others\"><\/span>Using Third-Party DNS Providers (Cloudflare and Others)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You don&#8217;t have to manage your DNS with the same company that hosts your website or registered your domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Many website owners use a dedicated DNS provider like Cloudflare while keeping their domain registered with one company and their website hosted with another.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you&#8217;re unfamiliar with Cloudflare, you can explore its <strong>DNS and security platform<\/strong> on the official website: <strong><a href=\"https:\/\/www.cloudflare.com\/dns\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cloudflare.com\/dns\/<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This setup is common because DNS providers often offer benefits beyond basic DNS management, including :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Faster DNS resolution through a globally distributed network <\/li>\n\n\n\n<li>DDoS protection against malicious traffic <\/li>\n\n\n\n<li>Advanced security features and traffic filtering <\/li>\n\n\n\n<li>DNS analytics and performance insights <\/li>\n\n\n\n<li>Built-in Content Delivery Network (CDN) services to improve website speed<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_it_works\"><\/span>How it works<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Normally, your domain registrar points your domain to the nameservers provided by your hosting company.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you move your DNS to a third-party provider such as Cloudflare, you replace those nameservers with the ones supplied by Cloudflare.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">From that point on, Cloudflare becomes the <strong>authoritative DNS provider<\/strong> for your domain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That means:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your DNS records are managed in the Cloudflare dashboard.<\/li>\n\n\n\n<li>Changes made at your previous DNS provider no longer affect your website.<\/li>\n\n\n\n<li>Visitors still reach your hosting server, but DNS requests are answered by Cloudflare.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Proxied_vs_DNS_Only_records\"><\/span>Proxied vs. DNS Only records<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">One feature that makes Cloudflare different from many DNS providers is its optional proxy service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a record is <strong>proxied<\/strong>, visitors connect to Cloudflare first. Cloudflare then forwards traffic to your hosting server while helping improve performance and absorb malicious traffic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a record is set to <strong>DNS Only<\/strong>, Cloudflare simply answers the DNS request and sends visitors directly to your server.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Website_Migration_DNS_Checklist\"><\/span>Website Migration DNS Checklist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Moving your website to a new hosting provider doesn&#8217;t have to cause downtime. With a little preparation, you can migrate your website while keeping both your site and email working normally.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The key is to make your DNS changes only after the new server is fully ready.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Before_you_change_DNS\"><\/span>Before you change DNS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Complete these tasks before updating any DNS records or nameservers.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Make a full backup of your website and database.<\/li>\n\n\n\n<li>Verify that all DNS records (A, AAAA, CNAME, MX, TXT, SPF, DKIM, and DMARC) are documented.<\/li>\n\n\n\n<li>Lower the TTL for records you&#8217;ll change (for example, from 3600 seconds to 300 seconds).<\/li>\n\n\n\n<li>Upload your website to the new hosting server.<\/li>\n\n\n\n<li>Create all required DNS records on the new DNS provider if you&#8217;re changing nameservers.<\/li>\n\n\n\n<li>If DNSSEC is enabled, disable it before changing nameservers. <\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"During_the_migration\"><\/span>During the migration<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once everything has been tested, it&#8217;s time to switch your traffic to the new server.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Update your A and AAAA records, or change your nameservers if you&#8217;re moving DNS providers.<\/li>\n\n\n\n<li>Verify that the website loads correctly from the new server.<\/li>\n\n\n\n<li>Test important pages, forms, and login functionality.<\/li>\n\n\n\n<li>Send and receive a test email using your domain.<\/li>\n\n\n\n<li>Monitor DNS propagation from multiple locations.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"After_the_migration\"><\/span>After the migration<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Even after your website is loading correctly, a few final checks can help prevent problems later.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Re-enable DNSSEC if you use it.<\/li>\n\n\n\n<li>Increase your TTL back to its normal value (typically 3600 seconds or higher).<\/li>\n\n\n\n<li>Leave your old hosting account active for at least 48 to 72 hours helps prevent downtime while DNS propagation finishes.<\/li>\n\n\n\n<li>Monitor website traffic and error logs.<\/li>\n\n\n\n<li>Confirm that email continues working normally.<\/li>\n\n\n\n<li>Remove the old hosting account only after you&#8217;re sure all traffic has moved to the new server.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_DNS\"><\/span>What is DNS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNS stands for <strong>Domain Name System<\/strong>. It&#8217;s like the internet&#8217;s address book. When you type a website address such as <strong>example.com<\/strong>, DNS translates that name into the IP address that computers use to locate the correct server.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_does_DNS_work\"><\/span>How does DNS work?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you visit a website, your browser asks a DNS resolver to find the website&#8217;s IP address. The resolver checks several DNS servers, retrieves the correct IP address, and returns it to your browser, which then connects to the website. The entire process usually takes only a few milliseconds.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Whats_the_difference_between_DNS_and_a_nameserver\"><\/span>What&#8217;s the difference between DNS and a nameserver?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNS is the overall system that translates domain names into IP addresses. A nameserver is one server within that system that stores your domain&#8217;s DNS records and answers queries about them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_are_the_most_common_DNS_record_types\"><\/span>What are the most common DNS record types?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The most commonly used DNS records are:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A<\/strong> \u2013 Points a domain to an IPv4 address.<\/li>\n\n\n\n<li><strong>AAAA<\/strong> \u2013 Points a domain to an IPv6 address.<\/li>\n\n\n\n<li><strong>CNAME<\/strong> \u2013 Creates an alias for another domain name.<\/li>\n\n\n\n<li><strong>MX<\/strong> \u2013 Routes email.<\/li>\n\n\n\n<li><strong>TXT<\/strong> \u2013 Stores verification and email security records.<\/li>\n\n\n\n<li><strong>NS<\/strong> \u2013 Identifies the authoritative nameservers for a domain.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Whats_the_difference_between_an_A_record_and_a_CNAME\"><\/span>What&#8217;s the difference between an A record and a CNAME?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An <strong>A record<\/strong> points directly to an IP address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A <strong>CNAME<\/strong> points to another domain name instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use an A record for your main website and a CNAME for aliases such as <strong>www<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_long_does_DNS_propagation_take\"><\/span>How long does DNS propagation take?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Most DNS changes appear within a few minutes to a few hours. In some cases, they can take up to 48 hours, depending on DNS caching and TTL values.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_TTL_in_DNS\"><\/span>What is TTL in DNS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">TTL (Time To Live) tells DNS resolvers how long they can cache a DNS record before checking for updates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A lower TTL allows changes to spread more quickly, while a higher TTL reduces the number of DNS lookups.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_do_I_connect_my_domain_to_my_hosting\"><\/span>How do I connect my domain to my hosting?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You have two options:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Change your nameservers so your hosting provider manages DNS.<\/li>\n\n\n\n<li>Keep your current nameservers and update the A record to point to your hosting server.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_did_my_email_stop_working_after_changing_DNS\"><\/span>Why did my email stop working after changing DNS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Changing nameservers moves all of your DNS records, including email records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If MX, SPF, DKIM, or DMARC records aren&#8217;t copied to the new DNS provider, email may stop working until they&#8217;re restored.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_DNSSEC\"><\/span>What is DNSSEC?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNSSEC (Domain Name System Security Extensions) adds digital signatures to DNS records so resolvers can verify that DNS responses haven&#8217;t been modified by attackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It improves DNS security but does not encrypt DNS traffic.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_DNS_hijacking\"><\/span>What is DNS hijacking?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DNS hijacking happens when someone gains control of your DNS settings and redirects your domain to a different destination.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The best protection is using strong passwords, enabling two-factor authentication (2FA), turning on Domain Lock, and using DNSSEC where available.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DNS feels complicated until you can see how the pieces fit together. Your <strong>domain name<\/strong> is the address people know, your <strong>web hosting<\/strong> is where your website lives, and DNS is the system that quietly connects the two. Every record you&#8217;ve read about here is just one instruction in that system, telling the internet where your site loads, where your email goes, and how to confirm it&#8217;s really you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A few habits will save you most of the trouble people run into. Always edit your DNS records where your nameservers actually point. Turn on two-factor authentication with domain lock, because that&#8217;s what stops most real attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once it&#8217;s set up correctly, DNS does its job in the background and you rarely have to think about it again. If you&#8217;d like your <strong>domain<\/strong>, <strong>DNS<\/strong>, <strong>hosting<\/strong>, and <strong>email<\/strong> managed together in one place, explore <a href=\"https:\/\/www.kailashcloud.com\/web-hosting-in-nepal\">Kailash Cloud hosting<\/a> to get started.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"Everything that happens after someone types your domain name into a browser, from DNS and nameservers to web&hellip;","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_display_header_overlay":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","csco_post_video_location":[],"csco_post_video_location_hash":"","csco_post_video_url":"","csco_post_video_bg_start_time":0,"csco_post_video_bg_end_time":0,"csco_post_video_bg_volume":false,"footnotes":""},"categories":[38],"tags":[28,31,29,34,32,37,33,30,36],"class_list":["post-895","post","type-post","status-publish","format-standard","category-dns-domains","tag-dns","tag-dns-propagation","tag-dns-records","tag-dns-security","tag-domain-name-system","tag-domain-names","tag-email-dns","tag-nameservers","tag-web-hosting","cs-entry","cs-video-wrap"],"_links":{"self":[{"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/posts\/895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/comments?post=895"}],"version-history":[{"count":18,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/posts\/895\/revisions"}],"predecessor-version":[{"id":921,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/posts\/895\/revisions\/921"}],"wp:attachment":[{"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/media?parent=895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/categories?post=895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kailashcloud.com\/blog\/wp-json\/wp\/v2\/tags?post=895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}