DataHouse Tools

Tool

DNS delegation checker

Checks NS, SOA, basic domain delegation consistency and DNSSEC records such as DS, DNSKEY and RRSIG.

MVP

DNS audit

DNS delegation checker: NS, SOA and DNSSEC

The DataHouse DNS delegation checker reviews nameservers, SOA data and DNSSEC records such as DS, DNSKEY and RRSIG. It is useful after DNS operator changes, registrar changes and DNSSEC deployment.

Authoritative servers

NS records should point to the expected authoritative servers and answer consistently.

SOA

SOA data helps identify the primary server, serial and zone responsibility.

DNSSEC

DS, DNSKEY and RRSIG show whether a validating resolver can build a chain of trust.

When should DNS delegation be checked?

  • After changing registrar or DNS operator.
  • Before and after enabling DNSSEC.
  • After website, mail or cloud migration.
  • When only some users see the new site or mail platform.
  • When certificate issuance or validation fails.

How to use DNS results

DNS delegation is the foundation for websites, mail, certificates and DNSSEC. Small inconsistencies can look like application outages.

DNS audit DNSSEC glossary WHOIS / RDAP SSL checker Mail tester

FAQ: DNS delegation

What should be checked first in DNS?

Start with NS and SOA consistency, then check DNSSEC records and the services that depend on the domain.