ndig

Query DNS records from the authoritative source.

Most DNS tools query your local resolver. ndig queries the authoritative nameserver directly — the one that actually holds the records. What you see is what's published, not what's cached.

Features

• Queries the authoritative nameserver automatically via SOA lookup
• Supports all standard record types: A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT
• DNSSEC record types: RRSIG, DNSKEY, DS, NSEC, NSEC3, CDNSKEY, CDS
• Use -t DNSSEC to query all DNSSEC types at once
• Sorted output by default; -u for unsorted
• Short output mode with -s strips TTL and class fields
• Query a specific nameserver by IP or by alias: cloudflare, google, opendns, quad9, verisign, comodo

Install

Requires Node.js 18+ and dig.

git clone https://github.com/nopolabs/ndig
cd ndig
npm install
npm link

View on GitHub →