Web Server Rescue
Read-onlyCompare Authoritative Nameserver Answers
Recursive resolvers disagree or propagation looks stuck, and you need to check whether the authoritative nameservers themselves return the same edge IP.
Command
for ns in $(dig +short NS example.com); do printf '%s ' "$ns"; dig @"$ns" +short example.com A; doneBefore you run this
System impact: Read-only. Low when scoped to the shown target.
When not to use it: Do not edit zone data from this output alone. First confirm which provider owns the live zone and whether all nameservers are in sync.
Expected output
Each authoritative nameserver followed by its A record answer, making mismatched zone data visible.
System impact
Read-only. Nothing changes. The command lists NS records and asks each authoritative nameserver for the A record.
Recovery / rollback: no state is changed.
When to use it
Use when propagation looks inconsistent even after recursive caches should have expired.
When not to use it
Do not edit zone data from this output alone. First confirm which provider owns the live zone and whether all nameservers are in sync.
next steps
Related commands
Compare DNS Answers Across Resolvers
One resolver can still have the old edge IP while another has the new one.
for r in 1.1.1.1 8.8.8.8 9.9.9.9; do printf '%s ' "$r"; dig @"$r" +short example.com A; done
Compare A and AAAA Records
IPv4 worked. IPv6 sent users to a different edge.
printf 'A '; dig +short example.com A; printf 'AAAA '; dig +short example.com AAAA
Check CAA Certificate Issuers
The certificate request failed because DNS allowed the wrong issuer.
dig +short example.com CAA
Check the WWW CNAME Target
The apex was right. The www name pointed through a different path.
dig +short www.example.com CNAME
Show the DNS Answer TTL
The fix was correct. The TTL explained why users still saw the old edge.
dig +noall +answer example.com A
Study mapping
Use this as independent command practice: read the notes, predict the output, then compare it with the example before using a real shell.
Independent study support only. No affiliation, endorsement, exam dumps, or real exam questions.