--- title: "DNS NS Records Explained: Function, Setup, and SPF Examples | AutoSPF" description: "Learn what DNS NS records are, how they work, and how to manage nameservers, delegation, reliability, and SPF records for proper DNS resolution." image: "https://autospf.com/og/blog/dns-ns-records-explained-function-setup-and-spf-examples.png" canonical: "https://autospf.com/blog/dns-ns-records-explained-function-setup-and-spf-examples/" --- Quick Answer A DNS NS record identifies the authoritative nameservers responsible for a domain’s DNS records. It enables DNS delegation and resolution, while SPF records authorize email senders. Proper NS configuration helps maintain reliable websites and email services. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=DNS%20NS%20Records%20Explained%3A%20Function%2C%20Setup%2C%20and%20SPF%20Examples&url=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F&title=DNS%20NS%20Records%20Explained%3A%20Function%2C%20Setup%2C%20and%20SPF%20Examples "Share on Reddit") [ ](mailto:?subject=DNS%20NS%20Records%20Explained%3A%20Function%2C%20Setup%2C%20and%20SPF%20Examples&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F "Share via Email") ![DNS NS Records and SPF Setup](https://media.mailhop.org/autospf/spf-lookup-2397-1789125645426.jpg) ## What Is a DNS NS Record? Definition and Role in Domain Resolution A DNS NS record, short for name server record, tells the Domain Name System which nameserver is responsible for answering DNS queries for a domain. In practical terms, the **DNS NS record** connects a domain such as example.com to one or more authoritative name servers that hold its [DNS configuration](https://www.digicert.com/blog/an-introduction-to-dns-configurations). _When someone visits a website, sends email, or requests a subdomain like blog.example.com, DNS resolution begins by finding the correct nameserver._ That authoritative nameserver then provides the relevant DNS record, such as an A record for an IP address, a CNAME record for an alias, or an [MX record](https://www.digicert.com/blog/what-is-an-mx-rec) for email routing. ### The role of NS records in DNS A DNS NS record does not usually point directly to a website or [mail server](https://www.activecampaign.com/glossary/mail-server). Instead, it points to the DNS server that knows where those services are located. For example: ``` example.com. 3600 IN NS ns1.exampleserver.com. example.com. 3600 IN NS ns2.exampleserver.com. ``` In this example, ns1.exampleserver.com and ns2.exampleserver.com are the nameserver hosts for the domain. The authoritative nameserver stores the domain’s [zone file](https://en.wikipedia.org/wiki/Zone%5Ffile), including records such as: - A record entries for web server **IP address mapping** - CNAME record entries for aliases such as www or blog - MX record entries for email delivery - [TXT records](https://unstoppable.ai/blog/categories/education/article/txt-records) for SPF, [DKIM](https://autospf.com/blog/how-dkim-works-a-comprehensive-guide-to-email-authentication/), and verification - Zone NS records that define authoritative DNS servers![Spf Record Checker 6377](https://media.mailhop.org/autospf/spf-record-checker-6377-1789125774081.jpg) ### Why NS records matter for domain authority In DNS, domain authority means the right to answer for a domain’s DNS data. A DNS NS record establishes where that authority lives. Without a valid nameserver and delegation path, the domain cannot complete **DNS resolution reliably**. This structure is defined in the DNS hierarchy described in [RFC 1035](https://datatracker.ietf.org/doc/html/rfc1035) and other core DNS standards. _A root name server points to the appropriate Top-Level Domain, such as .COM or .ORG. Then the TLD name server, operated by a registry such as the COM registry for .COM, points to the authoritative nameserver for the domain._ ## How NS Records Work: Authoritative Name Servers, Delegation, and DNS Lookups NS records work through delegation. Delegation is the process of telling the **parent DNS zone** which nameserver is authoritative for a [child domain](https://networkencyclopedia.com/child-domain/). For example, the .COM registry delegates example.com to the domain’s authoritative name servers. ### From resolver to authoritative server Here is a simplified version of How DNS Works during a dns lookup: 1. A user enters example.com in a browser. 2. The **operating system** or browser asks a dns resolver. 3. A recursive DNS resolver checks its cache first. 4. If no cached answer exists, the resolver asks a root name server. 5. The root refers it to the relevant tld name server. 6. The [TLD server](https://dnsmap.io/articles/what-are-top-level-domain-%28tld%29-name-servers) provides the DNS NS record for the domain. 7. The resolver asks the authoritative nameserver for the requested DNS record. 8. The authoritative nameserver returns the A record, [CNAME record](https://efficientip.com/glossary/what-is-cname/), MX record, or other requested answer. The “Authoritative Server” is the final source of truth for the domain’s DNS zone. If its dns configuration is wrong, **dns resolution** may fail even if the domain registrar is correct.![Spf Record Checker 9721](https://media.mailhop.org/autospf/spf-record-checker-9721-1789125808910.jpg) ### Delegation at the parent zone Delegation occurs outside the ordinary DNS zone file in many setups. Your domain registrar stores the **parent-side nameserver assignment**, while your dns hosting provider stores the zone records themselves. For example, a [DNS hosting](https://www.expressvpn.com/glossary/dns-hosting/?srsltid=AfmBOoo4fnbp4x96F-eMvK0m90gIO2W0peONWvUnpbhVS9ULQJxFbYo8) provider may assign several authoritative nameservers to your domain. The nameservers configured at the registrar determine which provider is authoritative for the domain’s DNS zone. ``` ns1.dnsimple-edge.com ns2.dnsimple-edge.net ns3.dnsimple-edge.io ns4.dnsimple-edge.org ``` If the nameservers configured at your domain registrar point to a specific DNS provider, that provider becomes authoritative for your domain’s DNS records. The same principle applies when using a **cloud service or custom nameservers**: the nameservers entered at the registrar determine which authoritative DNS servers manage your domain’s DNS resolution. ## How to Find, Add, and Update NS Records in Your DNS Provider Managing a DNS NS record usually involves two places: _the registrar, where you change nameservers, and the DNS hosting provider, where you manage the DNS record set._ ### How to find current NS records You can inspect NS records using [command-line tools](https://www.cbtnuggets.com/blog/technology/system-admin/what-is-command-line-tool) or web-based checkers. Common methods include: ``` nslookup -type=NS example.com ``` or: ``` dig NS example.com ``` You can use a DNS checker to compare global DNS results. These tools help with dns troubleshooting because they reveal which nameserver is **visible globally** and whether delegation has propagated. ### How to add or update NS records To update ns records, follow this general process: 1. Sign in to your domain registrar. 2. Locate the nameserver or [domain management](https://www.networksolutions.com/blog/domain-management-101/) settings. 3. Replace default name servers with the authoritative nameserver values from your DNS hosting provider. 4. Save the change nameservers request. 5. Confirm that the domain’s zone contains required records such as an **A record, CNAME record, and MX record**. 6. Wait for [TTL](https://legal-resources.uslegalforms.com/t/time-to-live-ttl) and registry propagation.![Spf Record Checker 1971](https://media.mailhop.org/autospf/spf-record-checker-1971-1789130129591.jpg)For mydomain.com, you might replace registrar defaults with: ``` ns1.exampleserver.com ns2.exampleserver.com ``` If you are moving from one provider to another during a [domain transfer](https://www.ionos.com/domains/domain-transfer), verify domain ownership and copy all existing DNS records first. Missing an MX record can disrupt email delivery. Missing an **A record** can make a website unreachable. An incorrect CNAME record can break a subdomain. _Incorrect nameserver delegation can prevent DNS resolvers from reaching the correct authoritative DNS servers, potentially disrupting multiple services across the domain._ #### Registrar-side nameservers Registrar-side nameservers control domain delegation. This is where you specify the authoritative nameserver set for the domain. #### Zone-side NS records Zone NS records inside the zone file are also important, especially for consistency and secondary DNS. Some platforms classify these as **System Records** because they are essential to the zone’s operation. ## Common NS Record Setup Issues and Best Practices for Reliability NS configuration mistakes are common because **NS records** affect the entire domain. A single incorrect nameserver can cause intermittent failures depending on which dns server a recursive resolver contacts.![Spf Lookup 3099](https://media.mailhop.org/autospf/spf-lookup-3099-1789125902108.jpg) ### Common mistakes to avoid Frequent issues include: - Entering a misspelled **nameserver hostname** - Mixing old and new providers during a migration - Forgetting to create records before changing delegation - Using only one authoritative nameserver instead of multiple nameservers can create a single point of failure. - Using vanity name servers without proper [glue records](https://support.openprovider.eu/hc/en-us/articles/115005229088-Glue-records-How-to-create-and-modify-glue-records) - Removing System Records accidentally - Assuming TTL changes apply instantly everywhere For reliability, use at least two authoritative name servers on separate infrastructure. A [primary and secondary server](https://threatcop.com/blog/primary-dns-and-secondary-dns/) can reduce the risk of DNS disruption if one server or location becomes unavailable. Distributing authoritative DNS across multiple locations can also **improve availability** and reduce lookup latency. ### Best practices for DNS management Before changing a DNS NS record, export or audit the zone file. Confirm that every critical DNS record exists at the new provider: _A record, CNAME record, MX record, TXT records, and any service-specific entries._ Best practices include: - Lower TTL before migration when possible - Test with [nslookup](https://www.techtarget.com/it-infrastructure/definition/What-is-nslookup) and dig - Compare DNS responses across different resolvers. - Keep registrar account access secure - Document domain ownership, provider access, and **privacy settings** - Avoid deleting old DNS zones until propagation is complete - Monitor dns resolution after delegation changes Good dns management treats the nameserver layer as foundational. _If delegation is wrong, even perfectly configured A record, CNAME record, and MX record entries will not be reachable._ ![Spf Record Checker 2511](https://media.mailhop.org/autospf/spf-record-checker-2511-1789126184273.jpg) ## NS Records vs. SPF Records: Key Differences and Practical SPF Examples A DNS NS record and an [SPF record](https://autospf.com/blog/spf-records-in-dns-a-complete-guide-for-email-security/) are both DNS records, but they solve very different problems. An NS record defines which nameserver is authoritative for a domain. It supports delegation and makes dns resolution possible. An SPF record is a TXT record that identifies which mail servers are allowed to send email for the domain. For example, this DNS NS record delegates authority: ``` example.com. 3600 IN NS ns1.exampleserver.com. example.com. 3600 IN NS ns2.exampleserver.com. ``` This SPF record authorizes [Google Workspace](https://www.uschamber.com/co/run/technology/google-workspace-for-business) to send email: ``` example.com. 3600 IN TXT "v=spf1 include:_spf.google.com ~all" ``` A more complex SPF record might include a **cloud provider** or email service: ``` example.com. 3600 IN TXT "v=spf1 include:_spf.google.com include:mail.example.net ip4:203.0.113.10 ~all" ``` The DNS NS record controls where DNS answers come from. The SPF TXT record controls email sender authorization. If your domain sends mail through a provider that is not authorized by its SPF record, those messages may fail **SPF authentication**. If your delegation points to the wrong authoritative nameserver, the SPF record may not be found at all. Tools such as [AutoSPF](https://autospf.com/) can help manage complex SPF records when a domain uses multiple email-sending services while staying within SPF DNS lookup limits. Practical comparison: | Record type | Purpose | Example use | | -------------- | ------------------------------------- | ---------------------------------------------- | | DNS NS record | Identifies authoritative name servers | Delegates example.com to ns1.exampleserver.com | | A record | Maps a hostname to an IP address | example.com to 203.0.113.10 | | CNAME record | Creates an alias | www to example.com | | MX record | Routes email | example.com mail to mail provider | | SPF TXT record | Authorizes mail senders | Allows Google or another sender | For a working domain, these records cooperate. The DNS NS record and nameserver delegation make the zone reachable; the authoritative nameserver serves the [A record,](https://www.whatsmydns.net/dns-lookup/a-records) CNAME record, MX record, and [SPF TXT record](https://autospf.com/blog/generate-spf-txt-records-the-ultimate-tool-for-your-domain/); and recursive resolvers complete dns resolution for users and mail systems. ![Brad Slavin](https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead for AutoSPF's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) Scan Your Domain Now Instantly scan your domain for DKIM, SPF, and DMARC issues Check My Domain Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F) [ ](https://twitter.com/intent/tweet?text=DNS%20NS%20Records%20Explained%3A%20Function%2C%20Setup%2C%20and%20SPF%20Examples&url=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fdns-ns-records-explained-function-setup-and-spf-examples%2F) Copy Related Articles - [ ![SPF Standard](https://media.mailhop.org/autospf/images/2025/11/kitterman-spf-4236.jpg) 10 Reasons The SPF Standard Is Essential For Protecting Your Domain Foundational ](/blog/10-reasons-the-spf-standard-is-essential-for-protecting-your-domain/) - [ ![AI-based scams](https://media.mailhop.org/autospf/images/2024/08/spf-checker-2003.jpg) 4 ChatGPT and AI-based scams to be wary of in the second half of 2024 Foundational ](/blog/4-ai-and-chatgpt-scams-to-watch-for-in-2024/) - [ ![BEC attacks](https://media.mailhop.org/autospf/images/2024/02/spf-record-office-365.jpg) 6 Steps to Outplay BEC Attackers Foundational ](/blog/6-steps-to-outplay-bec-attackers/) - [ ![email security](https://media.mailhop.org/autospf/images/2024/05/sender-policy-framework-office-365.jpg) 7 Myths and Misconceptions about Sender Policy Framework Foundational ](/blog/7-myths-and-misconceptions-about-sender-policy-framework/) ## Related Articles [ Foundational 17m 10 Reasons The SPF Standard Is Essential For Protecting Your Domain Nov 20, 2025 ](/blog/10-reasons-the-spf-standard-is-essential-for-protecting-your-domain/)[ Foundational 5m 4 ChatGPT and AI-based scams to be wary of in the second half of 2024 Aug 16, 2024 ](/blog/4-ai-and-chatgpt-scams-to-watch-for-in-2024/)[ Foundational 6m 6 Steps to Outplay BEC Attackers Feb 2, 2024 ](/blog/6-steps-to-outplay-bec-attackers/)[ Foundational 4m 7 Myths and Misconceptions about Sender Policy Framework May 31, 2024 ](/blog/7-myths-and-misconceptions-about-sender-policy-framework/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"DNS NS Records Explained: Function, Setup, and SPF Examples","description":"Learn what DNS NS records are, how they work, and how to manage nameservers, delegation, reliability, and SPF records for proper DNS resolution.","url":"https://autospf.com/blog/dns-ns-records-explained-function-setup-and-spf-examples/","datePublished":"2026-09-11T00:00:00.000Z","dateModified":"2026-09-11T00:00:00.000Z","dateCreated":"2026-09-11T00:00:00.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://autospf.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind AutoSPF, DMARC Report, Phish Protection, and Mailhop. He founded DuoCircle in 2014 to solve the SPF 10-DNS-lookup problem at scale and has led the company's growth to 2,000+ customers. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement) rather than hands-on DNS engineering.","image":"https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/dns-ns-records-explained-function-setup-and-spf-examples/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/spf-lookup-2397-1789125645426.jpg","caption":"DNS NS Records and SPF Setup"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://autospf.com/foundational/"},{"@type":"ListItem","position":4,"name":"DNS NS Records Explained: Function, Setup, and SPF Examples","item":"https://autospf.com/blog/dns-ns-records-explained-function-setup-and-spf-examples/"}]} ```