...
Editorial Staff
Dns migration guide
A deep-dive into dns migration

This guide walks through planning, validating, executing, and verifying a DNS migration with minimal risk and near-zero downtime. It applies whether you’re moving between providers (e.g., from registrar DNS to a managed DNS platform), consolidating infrastructure, or migrating authoritative nameservers.
Save 50% off 25x faster ssd woocommerce hosting

Table of Contents

DNS Migration Guide (Production-Ready, Zero-Downtime Approach)

Follow the steps below to achieve production-ready, zero-downtime DNS migration:

  1. Pre-Migration Planning

    1. Inventory Everything

      Export or document all existing DNS records:

      • A / AAAA
      • CNAME
      • MX
      • TXT (SPF, DKIM, DMARC, verification tokens)
      • SRV
      • CAA
      • NS (child zones or delegated subdomains)
      • PTR (reverse DNS, if applicable)

      Tip: Do not rely solely on the control panel view—query live DNS:

      dig example.com ANY +noall +answer
dig example.com MX +noall +answer
dig example.com TXT +noall +answer

      Also verify:

      • Email routing
      • CDN or proxy settings
      • API-managed records
      • DNSSEC configuration
      • Hidden secondaries
      • Split-horizon (internal vs external DNS)

  2. Lower TTL Before Migration

    To reduce caching delays:

    1. Lower TTLs of all records to 300 seconds (5 minutes).
    2. Wait at least 1–2 original TTL cycles before proceeding.

    Example:

    dig example.com A +noall +answer

    Confirm TTL reflects new lower value.

  3. Prepare the New DNS Provider

    1. Recreate Zone File

      Manually recreate records or import a zone file:

      $TTL 300
@   IN  SOA ns1.newdns.com. admin.example.com. (
        2026030201 ; serial
        3600       ; refresh
        900        ; retry
        604800     ; expire
        300        ; minimum
)
@   IN  NS  ns1.newdns.com.
@   IN  NS  ns2.newdns.com.
@   IN  A   203.0.113.10
www IN  CNAME example.com.
@   IN  MX 10 mail.example.com.

    2. Validate Before Switching

      Test records against new nameservers:

      dig @ns1.newdns.com example.com A
dig @ns1.newdns.com example.com MX

      Compare with production:

      dig @8.8.8.8 example.com A

      Outputs should match exactly.

  4. DNSSEC Considerations

    If DNSSEC is enabled:

    • Remove DS records from registrar before switching nameservers
      OR
    • Configure DNSSEC on new provider first and update DS accordingly.

    Failure to align DNSSEC properly can cause complete domain outage.

    Verify:

    dig +dnssec example.com

  5. Change Nameservers

    At the registrar:

    • Update NS records to new provider’s authoritative nameservers.
    • Confirm glue records if using vanity nameservers.

    Example:

    Old:

    ns1.olddns.com
ns2.olddns.com

    New:

    ns1.newdns.com
ns2.newdns.com

  6. Propagation Monitoring

    DNS does not “fully propagate” globally at once. Instead, caches expire over time.

    Monitor:

    dig example.com NS
dig example.com A

    Check multiple resolvers:

    dig @1.1.1.1 example.com
dig @8.8.8.8 example.com
dig @9.9.9.9 example.com

    You can also use:

  7. Post-Migration Validation Checklist

    Website

    • HTTP/HTTPS loads correctly
    • SSL certificate valid
    • CDN functioning

    Email

    dig example.com MX
    • Send/receive test emails
    • Confirm SPF:
    dig example.com TXT

    Subdomains

    Test all critical subdomains:

    api.example.com
portal.example.com
mail.example.com

    Reverse DNS (if applicable)

    dig -x 203.0.113.10

  8. Rollback Strategy (Critical)

    Before migration:

    • Keep old DNS zone intact.
    • Do not delete old DNS records immediately.

    If needed:

    1. Revert nameservers at registrar.
    2. Wait TTL duration.
    3. Validate services again.

  9. High-Availability & Advanced Setups

    1. Primary / Secondary Model

      If using primary/secondary authoritative DNS:

      • Ensure AXFR enabled.
      • Restrict zone transfers by IP.
      • Validate SOA serial increments.

      Check transfer:

      dig @secondary-ip example.com AXFR

    2. Anycast DNS

      If migrating to Anycast DNS:

      • Confirm global POP coverage.
      • Test latency from multiple regions.
      • Validate geo-based routing if configured.

  10. Automation & Drift Prevention

    To avoid DNS drift:

    • Maintain zones in Git.
    • Use DNSControl or Terraform.
    • Schedule periodic validation scripts.

    Example comparison:

    dig @oldns example.com > old.txt
dig @newns example.com > new.txt
diff old.txt new.txt

  11. Recommended Timeline

    Time Action
    T-48h Lower TTLs
    T-24h Build new zone
    T-12h Validate new DNS
    T-0 Switch nameservers
    T+1h Validate critical services
    T+24h Restore normal TTLs

  12. Common Mistakes to Avoid

    • Forgetting MX or SPF records
    • Breaking DKIM selectors
    • Missing CAA records
    • Incorrect SOA serial format
    • Leaving DNSSEC misconfigured
    • Ignoring delegated subdomains
    • Forgetting wildcard records

  13. Final Hardening

    After full propagation:

    1. Raise TTL to production value (3600–86400).
    2. Remove temporary validation records.
    3. Re-enable DNSSEC if temporarily disabled.
    4. Archive final zone configuration.

Quick Migration Summary

  1. Inventory
  2. Lower TTL
  3. Replicate zone
  4. Validate via direct nameserver queries
  5. Switch NS
  6. Monitor propagation
  7. Validate services
  8. Raise TTL

Save 50% off 25x faster ssd woocommerce hosting

Conclusion

You now know DNS migration guide techniques.

✅ Easy Website Management with cPanel Support

Running a business is hard enough — managing your website shouldn’t be. That’s why we include full cPanel support with every hosting plan:

  • ✅ Simple Dashboard – No tech skills needed. Easily manage your website, emails, and more from one place.
  • ✅ Quick App Installs – Launch WordPress, shopping carts, or other tools with just one click.
  • ✅ Professional Email – Create business email addresses (like you@yourbusiness.com) in minutes.
  • ✅ Reliable Backups – Keep your website safe with easy-to-use backup and restore options.
  • ✅ Secure & Protected – Manage your site’s security and SSL certificates with built-in tools.
  • ✅ Real Help, Anytime – Our expert support team is available 24/7 for anything you need.

💬 What Our Customers Say

“I have had nothing but good experiences with Rad Web Hosting. The staff is there to help you to make sure that you stay online and I haven't had any downtime with my server in the time I have been with Rad Web Hosting and I have had my server for over two years.”

— Janice L., Owner of RJGM

🏆 Trusted by Small Business Owners Nationwide

Trust badges: 99. 9% uptime | 24/7 support | secure hosting | money-back guarantee

🚀 Get Started Today

Take the stress out of website management. With cPanel support and expert help just a click away, you can focus on what matters most — growing your business.

Choose Your Plan Now
Add as Preferred Source on Google
Avatar of editorial staff

Editorial Staff

Rad Web Hosting is a leading provider of web hosting, Cloud VPS, and Dedicated Servers in Dallas, TX.
lg