ndig

Query DNS records directly from the authoritative source.

Most DNS tools ask your local resolver. ndig asks the nameserver that actually holds the records — so what you see is what's published, not what's cached.

View on GitHub →

ndig terminal output showing DNS records queried from the authoritative nameserver

Features

Queries the authoritative nameserver automatically via SOA lookup
Supports all standard record types: A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT
DNSSEC record types: RRSIG, DNSKEY, DS, NSEC, NSEC3, CDNSKEY, CDS
Use -t DNSSEC to query all DNSSEC types at once
Sorted output by default; -u for unsorted
Short output mode with -s strips TTL and class fields
Query a specific nameserver by IP or alias: cloudflare, google, opendns, quad9, verisign, comodo

Install

Requires Node.js 18+ and dig.

git clone https://github.com/nopolabs/ndig
cd ndig
npm install
npm link