When you are migrating your DNS service to another DNS provider, you have to update the Name Servers for your DNS zone (domain name) at the Registrar. 

The Registrar provides the authoritative answers for DNS queries for Name Servers to your DNS zone.

DNSSEC is a security extension for DNS which helps securing that DNSes answer only with information provided by your DNS provider.

If DNSSEC is not enabled for your zone, updating name servers is easy. If DNSSEC is active, the name servers can not be changed without breaking the DNS zone, which means that you will experience your domain as down. There are exceptions to this for DNS providers that support DNSSEC transfer state, but most providers don't support this at the moment.

To transfer your DNS service to a new provider without any interruptions, you should:

  1. Disable DNSSEC at Registrar
  2. Wait 24 hours
  3. Disable DNSSEC at Name Server (remove DS-records)
  4. Switch name servers
  5. Wait 24 hours
  6. Re-enable DNSSEC

Many DNS providers don't give you the option to do 1 and 3 separately. You will then have to:

  1. Disable DNSSEC at your DNS provider
    (this then updates the registrar, and hopefully removes the DS record gracefully)
  2. Wait 24 hours
  3. Switch name servers.
  4. Wait 24 hours
  5. Re-enable DNSSEC

Both Registrar and Name Server/DNS updates can take up to 24 hours to become active, and propagate throughout the internet. How fast this happens depends on the top level domain, your DNS provider and the defined cache expiry times. Therefore, always be patient while working with DNS changes, and wait for changes to propagate before you move on and make more changes.

The command line tool "whois" will provide information about registered name servers.

You can use "dig -t NS domain.name" to check what name servers are currently active for your domain name. Because entries are cached in multiple levels, the answer you get can be different from what someone else gets - only time will expire DNS caches.

Did this answer your question?