DNS Basics for Cloud-Hosted Applications
Record types, TTL and propagation explained in the terms that matter when you are pointing a domain at a cloud server.
DNS is where a surprising share of deployment problems live, usually because a change was made correctly and then judged too early.
The records you will actually use
- A — points a name at an IPv4 address.
- AAAA — points a name at an IPv6 address.
- CNAME — points a name at another name. Cannot coexist with other records at the same name, which is why it does not belong at the root of a domain.
- MX — names the servers that receive mail for the domain.
- TXT — arbitrary text, used for domain verification and for mail authentication such as SPF and DMARC.
- NS — delegates a zone to a set of nameservers.
TTL and why changes feel slow
Every record carries a time-to-live telling resolvers how long they may cache the answer. If the TTL is 24 hours, a resolver that answered a query an hour ago will keep giving the old answer for another 23.
This is the entire explanation for propagation. Nothing is spreading; caches are expiring.
The practical technique is to lower the TTL to a few minutes at least one full old-TTL period before a planned change. Then the switch takes minutes. Raise it again afterwards, since very low TTLs mean more lookups.
Pointing a domain at a cloud server
- Reserve a static address so it survives the machine being rebuilt. See cloud networking basics.
- Create an A record for the root pointing at that address.
- Create a CNAME for www pointing at the root name, or a second A record.
- Wait for the old TTL to expire before concluding anything is wrong.
Records mail depends on
If the domain sends mail, three TXT-based mechanisms matter: SPF listing permitted senders, DKIM publishing a signing key, and DMARC stating a policy. Reverse DNS on the sending address is configured at the provider rather than in your zone. Context is in port 25 and outbound mail.
Where to host the zone
Registrar, cloud provider or a dedicated DNS service all work. What matters more is knowing which one is authoritative. Zones edited in two places, with one quietly ignored, are a recurring source of confusion on inherited environments.
Check the NS records to confirm which nameservers are actually in charge before editing anything.
Cloud accounts on OldCloudShop
Ten providers, every configuration and the starting price for each.
Continue in the library
Other entries covering account structure, billing, security and provider infrastructure.