DNS Playground
Follow a DNS query step by step, edit a teaching zone, and observe caching, TTL, and DNSSEC.
Follow www.example.test from the cache to its authority.
Teaching zone example.test
Edit only the A record for www.example.test. The address must be in the documentation network 192.0.2.0/24.
Current www.example.test A value: 192.0.2.80
Cache and simulated time
Time elapsed in the lab: 0 s
The resolver cache is empty.
Transport and privacy
Classic DNS: query contents are not encrypted on the network path.
Encryption protects the client-to-resolver connection. The chosen resolver still sees the requested name; authoritative operators see the queries required for delegation.
With minimisation: root sees the TLD, the TLD sees the zone name, and the authority sees the full name.
Lab scope
Only names inside the fictional example.test zone are accepted. No commands, DNS updates, zone transfers, or network traffic are run.
Query path
www.example.test A
Answer
No records in the Answer section.