Posts tagged with DNS on the WebPixie Blog.https://webpixie.io/blog/en-gbhttps://webpixie.io/blog/post/namecheap-outage-dns-resolution-vs-managementhttps://webpixie.io/blog/post/namecheap-outage-dns-resolution-vs-managementDuring Namecheap's 13 Aug 2026 outage, DNS zone resolution stayed up while DNS management went down. A real, confirmed case for why resolution and management are separate failure domains.Thu, 10 Sep 2026 18:19:00 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/ipv6-dual-stack-monitoringhttps://webpixie.io/blog/post/ipv6-dual-stack-monitoringA broken IPv6 path does not take a dual-stack site down. It adds real, measurable delay for a share of visitors while an IPv4-only uptime check keeps reporting "up" the entire time.Wed, 09 Sep 2026 11:25:00 GMTDNSUptime MonitoringMatt Scotthttps://webpixie.io/blog/post/cname-apex-alias-aname-flatteninghttps://webpixie.io/blog/post/cname-apex-alias-aname-flatteningA real CNAME can never sit at a zone apex, so every provider invented its own workaround: ALIAS, ANAME, CNAME flattening. Three names for roughly the same trick, with real differences in TTL handling and DNSSEC behavior, plus a newer standards-based alternative most guides skip.Thu, 03 Sep 2026 15:21:00 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/servfail-dnssec-validation-failureshttps://webpixie.io/blog/post/servfail-dnssec-validation-failuresDNSSEC fails closed: a broken chain of trust returns SERVFAIL, not a wrong answer. Two real incidents, Slack in 2021 and a TLD-wide DENIC outage in 2026, show the two root causes that actually happen, and the fast path to telling them apart.Fri, 28 Aug 2026 12:34:00 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/subdomain-takeover-ops-problemhttps://webpixie.io/blog/post/subdomain-takeover-ops-problemEvery subdomain takeover guide is written for a security team hunting exposure. Most takeovers start as an ops mistake: a CNAME left behind after a vendor migration or a decommissioned SaaS tool, with nobody deleting the record.Sat, 15 Aug 2026 13:51:47 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/dns-propagation-mythhttps://webpixie.io/blog/post/dns-propagation-mythDNS propagation isn't a transport mechanism, it's cache expiry. Negative caching, not TTL alone, explains why a fresh record can lag. Here's how to actually verify a change, and why that verification never really stops.Wed, 05 Aug 2026 10:37:00 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/dns-aid-explainedhttps://webpixie.io/blog/post/dns-aid-explainedDNS-AID proposes publishing AI agents through DNS records instead of well-known URIs. Here is what the draft actually specifies, what the Linux Foundation launch means, and why the record shape is still inconsistent across every implementation we checked.Thu, 02 Jul 2026 10:08:00 GMTDNSAI CrawlersMatt Scotthttps://webpixie.io/blog/post/domain-vs-dns-monitoringhttps://webpixie.io/blog/post/domain-vs-dns-monitoringDomain monitoring and DNS monitoring watch two different layers of the same name: registration versus resolution. Here is what each one catches, where they overlap at the nameserver, and which layer catches which outage, so you know why you need both.Sun, 28 Jun 2026 12:46:31 GMTDomainDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/detect-dns-record-changeshttps://webpixie.io/blog/post/detect-dns-record-changesDetecting DNS record changes is a snapshot-and-diff loop on top of dig and the SOA serial. The hard part is not the detection, it is filtering the false positives from GeoDNS, round-robin, and CDN IP rotation so you only alert on changes that matter.Tue, 23 Jun 2026 11:36:00 GMTDNSMonitoringMatt Scotthttps://webpixie.io/blog/post/what-dns-monitoring-catcheshttps://webpixie.io/blog/post/what-dns-monitoring-catchesDNS monitoring catches the silent failures an uptime check never shows: records pointing at the wrong server, nameservers out of sync, expired DNSSEC signatures, broken email records. Here is exactly what it catches, what it cannot, and how to start with dig.Thu, 18 Jun 2026 11:34:00 GMTDNSMonitoringMatt Scott