nl.example-site.club

this name is served by the NL (Netherlands) region of a small authoritative DNS cluster i run: a hidden primary, two Knot secondaries per region, and dnsdist on the public IPs. each demo subdomain is delegated to one region; this one to NL (Netherlands), nameservers ns-nl1 185.117.90.163, ns-nl2 5.149.255.195.

the blocks below run on page load.

full resolution path

dig +trace nl.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +trace +tries=1 +timeout=3 nl.example-site.club A
;; global options: +cmd
.			4254	IN	NS	j.root-servers.net.
.			4254	IN	NS	e.root-servers.net.
.			4254	IN	NS	g.root-servers.net.
.			4254	IN	NS	a.root-servers.net.
.			4254	IN	NS	m.root-servers.net.
.			4254	IN	NS	k.root-servers.net.
.			4254	IN	NS	i.root-servers.net.
.			4254	IN	NS	c.root-servers.net.
.			4254	IN	NS	b.root-servers.net.
.			4254	IN	NS	h.root-servers.net.
.			4254	IN	NS	f.root-servers.net.
.			4254	IN	NS	l.root-servers.net.
.			4254	IN	NS	d.root-servers.net.
;; Received 239 bytes from 127.0.0.53#53(127.0.0.53) in 0 ms

club.			172800	IN	NS	ns1.dns.nic.club.
club.			172800	IN	NS	c.nic.club.
club.			172800	IN	NS	a.nic.club.
club.			172800	IN	NS	b.nic.club.
club.			172800	IN	NS	ns3.dns.nic.club.
club.			172800	IN	NS	ns2.dns.nic.club.
club.			86400	IN	DS	54682 8 2 4FC0DBB4F04BE413BA1C0B1E92F4C5F0CCEBF7856370E20671AF6417 499DB258
club.			86400	IN	RRSIG	DS 8 1 86400 20260709050000 20260626040000 54393 . mFu6hrxiKkh+msH9Z97vUR/G1P0XN4Ik6VxdixvwviLHSQHBQOkdM8sk pfa5P+nU0Xj5iHCrai5DvnCgq+Wv0Q5/4UdRc3wTIMi735OCjNV3EYNW dbr5AzSCPIcsVaYP67lVqGX3p6+qncIHu1lpsbDp6sXIA3bpWnQuLESu 6Q2oESRJ9eTXf9y5KrI+l5UsLgCa784Stz7rPL0TwLaMXIW/1+eXUSan KWWf6c1iAova79mZtKHJUfG1dibgXgM6og/RzQjuWO8iDCyOOmEPTZEy hL9ewImDasjbm5vJgctyaLc9pbSeN/YXoyjGMvDKf/QupMSCakkzPMnV +QT/fQ==
;; Received 802 bytes from 192.112.36.4#53(g.root-servers.net) in 57 ms

;; UDP setup with 2610:a1:1072::d7#53(2610:a1:1072::d7) for nl.example-site.club failed: network unreachable.
;; UDP setup with 2610:a1:1073::d7#53(2610:a1:1073::d7) for nl.example-site.club failed: network unreachable.
example-site.club.	3600	IN	NS	maceio.ns.porkbun.com.
example-site.club.	3600	IN	NS	curitiba.ns.porkbun.com.
example-site.club.	3600	IN	NS	salvador.ns.porkbun.com.
example-site.club.	3600	IN	NS	fortaleza.ns.porkbun.com.
p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN NSEC3 1 1 0 - P7NNM7LDMDSVGHPFLL7BLLI1SP6KVP0G NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534
h93nrr909cuup0n56glppgpts657qolq.club. 900 IN NSEC3 1 1 0 - H9D4SD01FU1SJTDJL88BM95H62GEEQ04 NS DS RRSIG
h93nrr909cuup0n56glppgpts657qolq.club. 900 IN RRSIG NSEC3 8 2 900 20260706005242 20260622004037 15345 club. VsVdCLUZVBun+7QEVzBFUSYOIreXyZUIAKjtKOoX6bJ4Bc1K/F+XqP5n U18BJMzXt+MeP6EI2WuBl5273+gxJHxwj7o0dXACh7eRmku8CVCLBx/o rlsannoEtR2uVvMtDm7sN0TEawV2tbZrHIE8m+Wjk3WP5VoWKFJcEYeG FEj0Mi7Pjo6eru0NegadgLUmbgSIYqfmEB7R7S97NOWMZA==
p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN RRSIG NSEC3 8 2 900 20260707074916 20260623072918 15345 club. oIh/RMTJ1015x+862Zh7WtlcQpdyqXfG9WBZMQTu2gyB3oi4Q9+6mpYG 19V6LS6Jbi5MIYjBqqxWNWbyHnkXbSz4tIP36ysVCV2ubo7AHMlKwsRm M9qczGKrH7iqKPANHcT9Cy7pI1TrfsMymkMUdTaCK0L/pcaQZRuypl6b /Eagtl1xhWVKj7kuZOAHpk63bVOu8ChS2YvQ4ib78+A+HQ==
;; Received 740 bytes from 156.154.159.215#53(ns3.dns.nic.club) in 30 ms

;; UDP setup with 2400:cb00:2049:1::a29f:a96#53(2400:cb00:2049:1::a29f:a96) for nl.example-site.club failed: network unreachable.
nl.example-site.club.	600	IN	NS	ns-nl1.geodns.pp.ua.
nl.example-site.club.	600	IN	NS	ns-nl2.geodns.pp.ua.
;; Received 103 bytes from 162.159.10.150#53(salvador.ns.porkbun.com) in 3 ms

nl.example-site.club.	2315	IN	A	95.164.20.20
;; Received 65 bytes from 185.117.90.163#53(ns-nl1.geodns.pp.ua) in 38 ms

# .club hands example-site.club to its DNS host (porkbun); porkbun delegates nl.example-site.club to ns-nl1 (185.117.90.163), ns-nl2 (5.149.255.195), which are the NL (Netherlands) dnsdist nodes; that region answers.

answer straight from the NL (Netherlands) node

dig +tcp @185.117.90.163 nl.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +tcp +timeout=3 @185.117.90.163 nl.example-site.club A
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62235
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;nl.example-site.club.		IN	A

;; ANSWER SECTION:
nl.example-site.club.	1378	IN	A	95.164.20.20

;; Query time: 33 msec
;; SERVER: 185.117.90.163#53(185.117.90.163) (TCP)
;; WHEN: Fri Jun 26 12:30:27 UTC 2026
;; MSG SIZE  rcvd: 65

# the 'aa' flag means this node answers authoritatively.

geo by client subnet (cluster feature on geodns.pp.ua, asked at this region's node)

dig +short @185.117.90.163 geodns.pp.ua +subnet=1.2.3.0/24
dig +short @185.117.90.163 geodns.pp.ua +subnet=8.8.8.0/24    # any other subnet
203.0.113.7
95.164.20.20

# geo lives on the geodns.pp.ua zone (mod-geoip + EDNS Client Subnet) and is the same from every region; asked here at this region's node 185.117.90.163. the answer depends on the client subnet, not the node.

run on ubuntu24 at 2026-06-26 12:30:28 UTC. refresh to re-run.