-1

I need to test DNS changes before updating real DNS I need to set up A records and CNAME

Any Mac software that let me do it and possibly easily switch ON / OFF?

al404IT
  • 123
  • 1
  • 7
  • Any good online tool, like DNSViz or Zonemaster, can do an "undelegated" check, that is checking any specific domain on any set of nameservers, irrespective to the current delegation. – Patrick Mevzek Sep 06 '21 at 15:07

2 Answers2

1

In general people test locally if services run correctly on their new IP-addresses by overriding the current DNS records with entries in their hosts file

That doesn't allow you to set up CNAME records of course, you will have to map all records you want to test to the IP-addresses the CNAME records would eventually resolve to, before you can enter them in a hosts file.

Don't forget to remove those entries after you're done testing.

In general I don't think people run test name servers to test DNS changes and usually simply make them in their authoritative DNS server(s) at the time they are needed, but the procedure for that would be:

  • Install the same DNS server software you would be running in production on a test server (or your workstation).
  • Configure it and copy the master zone file/data from production to your test name server.
  • Make DNS changes.
  • Test if they are effective with a DNS query, i.e. dig changed.example.com. @IP-address-of-test-nameserver.
  • Change the network settings for your OS to use the IP-address-of-test-nameserver as the preferred/only name server.
  • Test you application(s).
  • When successful:
    Make the same change(s) in production or copy the zone file to production.

Homebrew provides the Bind DNS server https://formulae.brew.sh/formula/bind , Unbound https://formulae.brew.sh/formula/unbound and others for an easy install on your Mac.

Jimmy
  • 51
  • 1
  • I usually use file hosts but I did like to get something with the same exact configuration of DNS. I end up installing a small software for windows on my virtual machine. – al404IT Sep 07 '21 at 13:07
0

You could point to a non auth DNS server like Unbound, and put there some CNAMES or A records. This way you would get a 'view' of your DNS domain, then update production as needed.

user148942
  • 1
  • 1