Checking DNS responses from Route 53
If you created an Amazon Route 53 hosted zone for your domain, you can use the DNS checking tool in the console to see how Route 53 will respond to DNS queries if you configure your domain to use Route 53 as your DNS service. For geolocation, geoproximity, and latency records, you can also simulate queries from a particular DNS resolver and/or client IP address to find out what response Route 53 would return.
Important
The tool doesn't submit queries to the Domain Name System, it only responds based on the settings in the records in the hosted zone. The tool returns the same information regardless of whether the hosted zone is currently being used to route traffic for the domain.
The DNS checking tool works only for public hosted zones.
Note
The DNS checking tool returns information similar to what you would expect from the answer
section of the dig command. Therefore, if you query for the name
servers of a subdomain that point to the parent name servers, those will not be
returned.
Topics
Using the checking tool to see how Amazon Route 53 responds to DNS queries
You can use the tool to see what response Amazon Route 53 returns in response to a DNS query for a record.
To use the checking tool to see how Route 53 responds to DNS queries
Sign in to the AWS Management Console and open the Route 53 console at https://console.aws.amazon.com/route53/
. In the navigation pane, choose Hosted Zones.
On the Hosted Zones page, choose the name of a hosted zone. The console displays the list of records for that hosted zone.
-
To go directly to the Check response from Route 53 page, choose Test record.
Specify the following values:
The name of the record, excluding the name of the hosted zone. For example, to check www.example.com, enter www. To check example.com, leave the Record name field blank.
The type of the record that you want to check, such as A or CNAME.
Choose Get Response.
The Response returned by Route 53 section includes the following values:
- DNS response code
-
A code that indicates whether the query was valid or not. The most common response code is NOERROR, meaning that the query was valid. If the response is not valid, Route 53 returns a response code that explains why not. For a list of possible response codes, see DNS RCODES
on the IANA website. - Protocol
-
The protocol that Amazon Route 53 used to respond to the query, either UDP or TCP.
- Response returned by Route 53
-
The value that Route 53 would return to a web application. The value is one of the following:
-
For non-alias records, the response contains the value or values in the record.
-
For multiple records that have the same name and type, which includes weighted, latency, geolocation, and failover, the response contains the value from the appropriate record, based on the request.
-
For alias records that refer to AWS resources other than another record, the response contains an IP address or a domain name for the AWS resource, depending on the type of resource.
-
For alias records that refer to other records, the response contains the value or values from the referenced record.
-
Using the checking tool to simulate queries from specific IP addresses (geolocation and latency records only)
If you have created latency or geolocation records, you can use the checking tool to simulate queries from the IP address for a DNS resolver and a client.
To use the checking tool to simulate queries from specified IP addresses
Sign in to the AWS Management Console and open the Route 53 console at https://console.aws.amazon.com/route53/
. In the navigation pane, choose Hosted Zones.
On the Hosted Zones page, choose the name of a hosted zone. The console displays the list of records for that hosted zone.
To go directly to the Check response from Route 53 page, choose Test record set.
To go to the Check response from Route 53 page for a specific record, choose the check box for that record and choose Test record set.
If you chose Test record set without first choosing a record, specify the following values:
The name of the record, excluding the name of the hosted zone. For example, to check www.example.com, enter www. To check example.com, leave the Record name field blank.
The type of the record that you want to check, such as A or CNAME.
Specify the applicable values:
- Resolver IP address
Specify an IPv4 or IPv6 address to simulate the location of the DNS resolver that a client uses to make requests. This is useful for testing latency and geolocation records. If you omit this value, the tool uses the IP address of a DNS resolver in the AWS US East (N. Virginia) Region (us-east-1).
- EDNS0 client subnet IP
If the resolver supports EDNS0, enter the client subnet IP for an IP address in the applicable geographic location, for example, 192.0.2.0 or 2001:db8:85a3::8a2e:370:7334.
- Subnet mask
If you specify an IP address for EDNS0 client subnet IP, you can optionally specify the number of bits of the IP address that you want the checking tool to include in the DNS query. For example, if you specify 192.0.2.44 for EDNS0 client subnet IP and 24 for Subnet mask, the checking tool will simulate a query from 192.0.2.0/24. The default value is 24 bits for IPv4 addresses and 64 bits for IPv6 addresses.
Choose Get Response.
The Response returned by Route 53 section includes the following values:
- DNS query sent to Route 53
The query, in BIND format
, that the checking tool sent to Route 53. This is the same format that a web application would use to send a query. The three values are typically the name of the record, IN (for internet), and the type of the record. - DNS response code
A code that indicates whether the query was valid or not. The most common response code is NOERROR, meaning that the query was valid. If the response is not valid, Route 53 returns a response code that explains why not. For a list of possible response codes, see DNS RCODES
on the IANA website. - Protocol
The protocol that Amazon Route 53 used to respond to the query, either UDP or TCP.
- Response returned by Route 53
The value that Route 53 would return to a web application. The value is one of the following:
For non-alias records, the response contains the value or values in the record.
For multiple records that have the same name and type, which includes weighted, latency, geolocation, and failover, the response contains the value from the appropriate record, based on the request.
For alias records that refer to AWS resources other than another record, the response contains an IP address or a domain name for the AWS resource, depending on the type of resource.
For alias records that refer to other records, the response contains the value or values from the referenced record.
