About DNSlurp
Check DNS records across multiple servers
What is DNSlurp?
DNSlurp is a DNS lookup tool that queries multiple DNS servers simultaneously, letting you compare results and spot propagation issues. It supports 24 record types including DNSSEC records (DS, DNSKEY, RRSIG, NSEC, NSEC3), and exposes DNS header flags like AA (Authoritative Answer) and AD (Authenticated Data).
Features include authoritative lookups that trace the delegation chain to query nameservers directly, automatic TCP fallback for large responses, and support for both traditional UDP DNS and DNS-over-HTTPS (DoH) resolvers.
DNSlurp is part of the esoup toolkit. Check out its sister project for SSL/TLS certificate validation:
Classic DNSSEC Tools
For deeper DNSSEC analysis and visualization, these are the gold standard tools:
The definitive DNSSEC visualization tool. Creates detailed graphical maps of DNSSEC authentication chains, showing trust anchors, zone signatures, and any configuration errors. Essential for troubleshooting DNSSEC deployments.
A step-by-step DNSSEC debugger from Verisign Labs. Walks through the entire validation chain from root to your domain, clearly showing where any breaks occur. Great for pinpointing exactly which DS or DNSKEY record is misconfigured.
Shoutouts
Canadian DNS provider that's been doing it right since 1998. Rock-solid DNS hosting, excellent DNSSEC support, and an API that actually works. They care about DNS the way DNS should be cared about. Highly recommended.