An NS record (Name Server record) specifies the authoritative nameservers for a domain. These are the DNS servers that hold and serve all DNS records for the domain. Changing NS records transfers DNS authority from one provider to another.
NS Record Format
example.com. 86400 IN NS ns1.dnsprovider.com.
example.com. 86400 IN NS ns2.dnsprovider.com.Why At Least Two NS Records?
DNS requires a minimum of two nameservers for redundancy. If one is down, the other continues to answer queries. Most DNS providers offer 2–4 nameservers spread across different data centres and geographic regions.
Registrar NS vs Hosting NS
- When you register a domain, the registrar sets default NS records pointing to their own DNS servers.
- When you move to a different host or DNS provider (like Cloudflare), you update the NS records at the registrar to point to the new provider's nameservers.
- Once NS records are updated, the new provider controls all DNS records for the domain.
NS Record Propagation
NS records have a high TTL (often 24–48 hours) because they are rarely changed and cached aggressively. After changing nameservers, expect propagation to take up to 48 hours globally.
NS Records and DNSSEC
When DNSSEC is enabled, the DS (Delegation Signer) record at the parent TLD registry links to the DNSSEC keys served by the authoritative nameservers, creating a chain of trust from root to domain.