§ dns-trace

dns-trace.

Top-down view of how authority is delegated for a name. At each label depth — root, TLD, 2LD, and so on — shows the NS records and the glue addresses (A/AAAA) for those nameservers, then the final A/AAAA answer at the target.

what it shows

the delegation path a resolver would follow if its caches were empty. each step is the NS RRset at that depth plus the IPs of each name server. analogous to dig +trace.

caveats

DoH does not let us pin a specific upstream NS, so each query is answered by cloudflare-dns.com (which serves cached data). the chain shape is correct; the freshness depends on cloudflare's resolver cache for each label.

good for

finding where a delegation breaks (NXDOMAIN at the wrong depth), seeing whether a TLD has glue for a nameserver, spotting unbalanced NS sets, and visualizing the structural path for educational purposes.

upstream: cloudflare-dns.com (DoH).