Skip to main content

DNS propagation for nameserver and record changes

Why DNS updates take time, typical delays, plus simple ways to verify propagation and reduce downtime.

Daniel avatar
Written by Daniel
Updated over a month ago

DNS propagation is the “delay” you notice after changing DNS settings for a domain.

Some people reach the new server fast, others still hit the old one for a while. That’s normal and it happens because DNS answers get cached across the internet based on TTL (Time To Live). Cloudflare Docs

Tip: If you’re pointing a domain to a LumaDock VPS, use our DNS tools to confirm the change globally before you touch SSL or production traffic. lumadock.com

What DNS propagation means

DNS changes go live at the “source” first, then spread as caches expire. The source is your authoritative DNS provider, meaning the nameservers that host your zone file. easyDNS Knowledge Base

Most devices on the internet do not ask your authoritative nameservers every time. They ask a recursive resolver (ISP DNS, company DNS, router DNS, public resolvers like Google or Cloudflare) and that resolver may answer from cache until the TTL expires. Cloudflare Docs

What happens after you change DNS

A DNS change usually means one of these:

  • Updating a DNS record like A, AAAA, CNAME or MX

  • Switching nameservers at the registrar

Record updates are “inside” the zone. Nameserver changes affect delegation at the registrar and that can feel slower because more layers cache the old delegation.

Why people see different results

Different resolvers refresh at different times and caches exist in more than one place:

  • Recursive resolvers (ISP, company, public resolvers)

  • Local network caches (some routers)

  • OS level caches

  • App level caches (some browsers, VPN clients, security software)

So two people can type the same domain at the same time and hit different destinations until enough caches expire.

Typical timelines you can expect

Real world timing depends on the TTL that was set before the change.

Record changes (A, AAAA, CNAME, MX) often show up within minutes to a few hours and the outer limit is commonly the previous TTL.

Nameserver changes can take longer to look consistent worldwide and in “bad” cases people see mixed results for up to 24 to 48 hours due to delegation and caching.

How to make propagation faster during a migration

Lower the TTL ahead of time, then do the change, then raise it back when everything looks stable.

Step 1 - Lower TTL in advance

Set a lower TTL (example: 300 seconds) at least a day before a planned move so caches expire faster when the moment comes.

Step 2 - Apply the DNS change

Update the record values or switch nameservers once the lower TTL has been live for long enough.

Step 3 - Raise TTL after the move

After everything resolves correctly from multiple places, raise the TTL back to a value you’re comfortable with (higher TTL reduces repeated lookups).

How to check propagation

Checking from one laptop on one network can mislead you. A better approach is to check from multiple resolvers and locations.

Step 1 - Use LumaDock’s DNS checker

Use the LumaDock DNS checker to confirm the record values your domain is returning right now. lumadock.com

Step 2 - Check from multiple global resolvers

A global DNS propagation checker helps you see what different regions and resolvers return.

Step 3 - Verify from the command line

dig is the fastest way to see exactly what a specific resolver returns.

# Check an A record using your current resolver
dig example.com A

# Ask a specific resolver (Google DNS)
dig @8.8.8.8 example.com A

# Check nameservers (NS)
dig example.com NS +short

If you suspect delegation problems during a nameserver change, a trace is useful because it shows the chain from root to authoritative.

dig example.com +trace

Common issues that look like “propagation”

These problems can feel like propagation, even when DNS is already correct:

  • Wrong record type (A vs CNAME) or wrong hostname (@ vs www)

  • Old record left in place, like both A and AAAA pointing to different destinations

  • Proxy or CDN toggles that change how traffic routes (DNS value may be right but traffic differs)

  • DNSSEC issues after switching nameservers or DNS providers

If the DNS values look correct from multiple resolvers but the site still fails, the next step is usually checking the web server, firewall rules or SSL configuration.

Did this answer your question?