dns

Diagnose DNS configuration issues by explaining records, TTL behavior, and split-horizon concepts.

1|Updated Apr 15, 2026
One-click install
npx skills add https://github.com/MysticRyuujin/spirens --skill dns-mysticryuujin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dns
Source: https://github.com/MysticRyuujin/spirens/tree/main/dns
Command: npx skills add https://github.com/MysticRyuujin/spirens --skill dns-mysticryuujin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

DNS fundamentals — records, TTL, propagation, CAA gotchas, CNAME-at-apex, wildcards, split-horizon. Use when setting up a domain, debugging resolution failures, or reasoning about why a change "hasn't propagated."

Core Features & Use Cases

  • DNS concepts: A/AAAA/TXT/CNAME/CAA/MX records and how they influence resolution.
  • Propagation and caching: interpret TTLs and cache behavior to predict when changes take effect.
  • Best practices: avoid apex CNAMEs, apply proper split-horizon, and verify DNS health across resolvers.

Quick Start

Run a quick DNS sanity check for a domain by inspecting A/AAAA records, TTLs, and CAA/CNAME-at-apex configurations.

Frequently Asked Questions about dns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why are my DNS records not propagating after a domain change?

DNS propagation delays depend on TTL values set on your records. Higher TTLs cause resolvers and edge caches to retain old records longer, delaying changes from taking effect across authoritative servers.

How do I fix apex CNAME limitations when configuring a domain?

Apex domains cannot use standard CNAME records due to DNS restrictions. You must use A or AAAA records at the apex instead, or rely on provider-specific flattened CNAME workarounds to avoid resolution failures.

When do I need to configure CAA records for my domain?

CAA records restrict which certificate authorities are allowed to issue SSL certificates for your domain. You need them to prevent unauthorized certificate issuance and enforce security policies across authoritative resolvers.

What is split-horizon DNS and how does it work?

Split-horizon DNS serves different resolution answers based on the querying source. It works by configuring authoritative servers to return internal IPs for local resolvers and public IPs for external queries.

How do I troubleshoot irregular DNS resolution behavior across resolvers?

Troubleshoot DNS resolution by inspecting A and AAAA records against TTL cache behavior. Comparing responses across multiple resolvers and authoritative servers identifies caching inconsistencies and reveals stale edge cache data.