# DNS Migration Pre-Flight Checklist

*A free VigilDog resource — vigildog.com. Move DNS or nameservers with zero downtime.*

Most DNS-migration outages are avoidable. Work this checklist before, during, and after the switch.

---

## 1. Two weeks before — lower TTLs

- [ ] Drop the TTL on records you'll change (A/AAAA, CNAME, MX) to **300 seconds**.
- [ ] Wait for the OLD TTL to fully expire so resolvers pick up the low value.
- [ ] Low TTL = fast cutover and fast rollback if something's wrong.

## 2. Inventory every record

Export the full zone from the current provider. Account for:

- [ ] **A / AAAA** — apex and every subdomain (www, app, api, staging, mail…).
- [ ] **CNAME** — SaaS verifications, CDNs, `www`.
- [ ] **MX** — mail servers + priorities (miss this and email dies).
- [ ] **TXT** — SPF, DKIM (all selectors), DMARC, domain-verification records.
- [ ] **CAA** — which CAs may issue certs (or your SSL renewals break).
- [ ] **SRV / PTR / NS** — anything else in the zone.

## 3. Rebuild + verify parity at the new provider

- [ ] Recreate every record at the new DNS host **before** switching nameservers.
- [ ] Diff old vs new record-by-record — no omissions, correct values/priorities.
- [ ] Confirm with the free [DNS record checker](https://vigildog.com/tools/dns-checker) once live.

## 4. Protect email

- [ ] MX records match exactly (host + priority).
- [ ] SPF, every DKIM selector, and DMARC are carried over verbatim.
- [ ] Verify with the [SPF & DMARC checker](https://vigildog.com/tools/dmarc-checker) after cutover.

## 5. Cutover + rollback

- [ ] Change the nameservers at the registrar (or flip the A/CNAME).
- [ ] Monitor resolution from multiple locations as it propagates.
- [ ] Keep the old zone live until propagation completes — rollback = switch nameservers back.
- [ ] After 24–48h and confirmation, raise TTLs back to normal.

---

## After the move

DNS drift is the silent aftermath — a record added for the migration and never removed, a dangling
CNAME. **[VigilDog](https://vigildog.com/monitoring)** watches your DNS + email records and flags
unexpected changes. Free on your first domain: **https://vigildog.com/signup**