Skip to content

SYSTEM Cited by 1 source

dig

dig (domain information groper) is the canonical DNS debugging CLI from BIND. It sends a single DNS query to a specified resolver and prints the full response — query latency, authoritative section, additional section, and response code — making it the default tool for manually reproducing and classifying resolver issues.

Seen in

  • Stripe — The secret life of DNS packets (2024-12-12). Stripe used dig against the VPC resolver with representative reverse-DNS addresses (PTR records for IPs in 104.16.0.0/12) to manually confirm that responses were slow or returned SERVFAIL. This is the "make the failing query by hand and watch it fail" step in the debugging sequence.
Last updated · 470 distilled / 1,213 read