dig +trace follows the DNS delegation path. Instead of asking only one recursive resolver, it starts at the root and walks down through the TLD and authoritative name servers.
dig +trace example.comWhat +trace shows
- Root name server referral.
- TLD name server referral, such as .com or .org.
- Authoritative name servers for the domain.
- The final answer, if the delegation path completes.
When to use it
Use +trace when DNS looks correct inside your provider dashboard but not on the public internet. It helps reveal whether the registrar is pointing at the wrong name servers, whether glue is missing, or whether the authoritative zone is not serving the expected records.
What +trace does not show
+trace is not the same as testing every user resolver. A public resolver may still have cached data. Use trace to inspect delegation, then query public resolvers to inspect cache behavior.