Query DNS records directly from the authoritative source.

Most DNS tools ask your local resolver. ndig asks the nameserver that actually holds the records — so what you see is what's published, not what's cached.

Features

• Queries the authoritative nameserver automatically via SOA lookup
• Supports all standard record types: A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT
• DNSSEC record types: RRSIG, DNSKEY, DS, NSEC, NSEC3, CDNSKEY, CDS
• Use -t DNSSEC to query all DNSSEC types at once
• Sorted output by default; -u for unsorted
• Short output mode with -s strips TTL and class fields
• Query a specific nameserver by IP or alias: cloudflare, google, opendns, quad9, verisign, comodo

Install

Requires Node.js 18+ and dig.

git clone https://github.com/nopolabs/ndig
cd ndig
npm install
npm link

View on GitHub →