Domain DNS health checker
Delegation, nameservers, SOA, mail, web records and DNSSEC, in about a second.
DNS propagation
A change is live on your nameservers right away. Resolvers keep the old answer until its TTL runs out. See which ones still have it, city by city, and when each one will update.
From 11 cities, against Google, Cloudflare, Quad9 and OpenDNS. The answer from your own nameservers is the reference.
What DNSly checks
DNSly follows the delegation from the root zone to every authoritative nameserver, then reviews SOA, mail, web records and DNSSEC. Every report covers the same six areas.
- Direct nameserver queries
- No account required
- Results in about a second
-
Parent delegation
- Delegation present at the registry
- Nameservers resolve to addresses
- Parent and zone NS sets match
- Glue for in-zone nameservers
-
Nameservers
- Two to seven servers, per RFC 2182
- Subnet and network diversity
- Authoritative answers from each server
- SOA serial agreement
- No open recursion
-
SOA record
- A single SOA record for the zone
- Primary nameserver in the NS set
- Serial number
- Refresh, retry, expire and minimum TTL
-
Mail
- MX redundancy and valid hostnames
- No MX target aliased to a CNAME
- Reverse DNS for every mail address
- SPF and DMARC policies
-
Web records
- Addresses for www and the zone apex
- How www is aliased
- Publicly routable addresses
- Reverse DNS where mail shares an address
-
DNSSEC
- DS record at the parent
- Chain of trust validates
From your terminal
Every report and propagation check is also available as text. Run it with curl, save it to a file, or use the JSON in your own scripts.
Health report
-
curl https://dnsly.io/example.comReport in color, sized for an 80-column terminal -
curl "https://dnsly.io/example.com?plain"Plain text, for files and pipes -
curl "https://dnsly.io/api/analyze?domain=example.com"JSON, for scripts and monitoring
Propagation
-
curl https://dnsly.io/propagation/example.comWhich resolvers have the new A record, city by cityNew -
curl https://dnsly.io/propagation/example.com/mxAny record type at the end: a, aaaa, cname, mx, ns, txt, soa, caa or dsNew -
curl "https://dnsly.io/api/propagation?domain=example.com&type=A"JSON, for scripts and monitoringNew
Internationalized names work as typed. Reports are limited to about 20 a minute and propagation checks to about 6.