DNS Records Explained for People Who Ship Websites
A, AAAA, CNAME, MX, TXT and the TTL decisions that decide whether your migration is invisible or a two-hour outage.
Records you will actually touch
- A / AAAA — hostname to IP.
- CNAME — hostname to another hostname. Never on the zone apex.
- MX — mail routing, with priority values.
- TXT — SPF, DKIM, DMARC and domain verification.
TTL is a migration tool
Drop TTL to 300 seconds a day before a cutover, migrate, verify, then raise it back. Skipping this step is why "the site is still on the old server" tickets exist.
Verify from outside your network
dig +short A example.com @1.1.1.1
dig +short TXT example.com @8.8.8.8Your local resolver lies to you. Always query a public resolver when confirming propagation.
Paj Digital Labs
The engineering journal of Paj Digital Solutions — hosting, server infrastructure and web engineering, written by the people who run the servers.
Related reading
Hardening a Fresh VPS Beyond the Basics: Kernel, Auditd and Least Privilege
Standard SSH hardening fails against web-shells; true host security requires kernel sysctl isolation, execution blocking on temporary mounts, and auditd logging.
Hardening a Fresh VPS: The 30-Minute Production Checklist
Every new VPS ships wide open. Here is the exact sequence we run at Paj Digital Solutions before a single site goes live — SSH keys, fail2ban, kernel tuning and firewall rules.
Nginx as a Reverse Proxy in Front of Apache: A cPanel Survival Guide
Deploying Nginx as an Apache reverse proxy shields cPanel servers from resource exhaustion while retaining legacy .htaccess compatibility.