Troubleshoot Record Resolution Issues

Last updated

The following is a list of common issues to check if a record is not resolving correctly.

Check the domain resolution status

To use DNSimple DNS hosting, the domain must be delegated to DNSimple and its zone must be active. If no records in the zone resolve, start with Troubleshoot Domain Resolution Issues.

Check the record with +trace

The +trace option from dig shows exactly how the name is delegated.

Instead of asking a resolver, dig queries each name server in the chain itself, starting from the root name servers. It is useful for debugging delegation issues.

$ dig CNAME www.dnsimple.com +trace

;; global options: +cmd
.           6438    IN  NS  k.root-servers.net.
.           6438    IN  NS  l.root-servers.net.
...
;; Received 717 bytes from 1.1.1.1#53(1.1.1.1) in 42 ms

com.            172800  IN  NS  j.gtld-servers.net.
com.            172800  IN  NS  g.gtld-servers.net.
...
;; Received 1176 bytes from 170.247.170.2#53(b.root-servers.net) in 86 ms

dnsimple.com.       172800  IN  NS  ns1.dnsimple-edge.com.
dnsimple.com.       172800  IN  NS  ns2.dnsimple-edge.net.
dnsimple.com.       172800  IN  NS  ns3.dnsimple-edge.io.
dnsimple.com.       172800  IN  NS  ns4.dnsimple-edge.org.
...
;; Received 842 bytes from 192.33.14.30#53(b.gtld-servers.net) in 38 ms

www.dnsimple.com.   3600    IN  CNAME   dnsimple.com.
;; Received 59 bytes from 199.247.155.53#53(ns4.dnsimple-edge.org) in 34 ms

In the resulting query chain, you can see each hop to resolve the CNAME.

  1. The root name servers are queried.
  2. The query is passed along to the .com name servers.
  3. The query reaches DNSimple’s name servers.
  4. DNSimple returns the CNAME record.

If DNSimple’s name servers are not present in this trace, you need to point to DNSimple.

Check the record propagation delay

If you recently changed a record, it may take a while for the change to propagate. This is especially true if the record has been cached by your local ISP.

You usually can bypass a propagation delay by passing a custom name server in the dig call.

The following command checks the DNS record against the ns1.dnsimple-edge.com name server:

$ dig www.dnsimple.com @ns1.dnsimple-edge.com

If you get the expected response, the record has been updated in our system, but the changes still need to propagate. They should be visible after the TTL period. To compare results globally or run checks with third-party sites, see External DNS Diagnostic Tools.

You can check it against any of DNSimple’s name servers.

Check the record update delay

When you change a record in our system, the changes are published almost immediately.

Our update queue may sometimes take a bit longer. Wait a few minutes and check again.

Check the DNSimple status page. We publish status updates when there is a known issue with our update queue.

Check for missing A or AAAA records at the apex domain

If you receive an error like “No address associated with hostname” when using ping or other tools, it typically means the domain is properly delegated to DNSimple, but there is no A record or AAAA record configured for the apex domain (the root domain, e.g., example.com).

This can happen when:

  • You have DNS records for subdomains (like www.example.com) but not for the root domain

  • You only have MX records for email but no A record for web traffic

  • The domain was recently set up and the A record has not been added yet

  • You have a wildcard record (like *.example.com) but no explicit record for the apex domain

Warning

Wildcard DNS records (e.g., *.example.com) do not match the apex domain (example.com). If you have a wildcard ALIAS or CNAME record for subdomains, you must also add a separate record for the apex domain itself if you want the root domain to resolve.

How to check

Use dig to query for A and AAAA records at the apex domain:

$ dig example.com A +short

$ dig example.com AAAA +short

If both commands return no results, you need to add an A or AAAA record for the apex domain.

You can also query DNSimple’s name servers directly to verify the record does not exist in our system:

$ dig example.com A @ns1.dnsimple-edge.com +short

$ dig example.com AAAA @ns1.dnsimple-edge.com +short

How to fix

  1. If you want to point the apex domain to a specific IP address: Add an A record (for IPv4) or AAAA record (for IPv6) with the Name field left blank.

  2. If you want to point the apex domain to a hostname (like a cloud service): Add an ALIAS record with the Name field left blank. This is necessary because CNAME records cannot be used at the apex domain or if you have other records like MX records.

  3. If you want to redirect the apex domain to another URL: Add a URL record with the Name field left blank.

Note

If you use ping to test your domain, keep in mind that ping needs an A or AAAA record to resolve, and the host behind it must answer ping.

  • ALIAS records: DNSimple’s name servers resolve ALIAS records to A and AAAA answers at query time, so ping resolves the name. Whether the ping gets a reply depends on the target host.
  • URL records: the name resolves to the IP address of DNSimple’s redirector, which handles the HTTP redirect. The redirector does not answer ping, so ping always times out for a URL record even when the redirect works. Test URL records in a browser or with curl -I instead.

For more information, see What Is an ALIAS Record? and Differences Among A, CNAME, ALIAS, and URL Records.

Have more questions?

If you have additional questions or need any assistance with your DNS records, just contact support, and we will be happy to help.