{"id":6183,"date":"2026-10-19T07:43:45","date_gmt":"2026-10-19T07:43:45","guid":{"rendered":"https:\/\/serverfellows.com\/blog\/?p=6183"},"modified":"2026-10-20T08:17:32","modified_gmt":"2026-10-20T08:17:32","slug":"reseller-hosting-dns-management","status":"publish","type":"post","link":"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/","title":{"rendered":"Reseller Hosting DNS Management: A Practical Operating Model for Many Client Zones"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"6183\" class=\"elementor elementor-6183\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9793ca3 e-flex e-con-boxed e-con e-parent\" data-id=\"9793ca3\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b9e5304 elementor-widget elementor-widget-image\" data-id=\"b9e5304\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"536\" src=\"https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/10\/Reseller-Hosting-DNS-Management-A-Practical-Operating-Model-for-Many-Client-Zones-1024x536.png\" class=\"attachment-large size-large wp-image-6237\" alt=\"\" srcset=\"https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/10\/Reseller-Hosting-DNS-Management-A-Practical-Operating-Model-for-Many-Client-Zones-1024x536.png 1024w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/10\/Reseller-Hosting-DNS-Management-A-Practical-Operating-Model-for-Many-Client-Zones-300x157.png 300w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/10\/Reseller-Hosting-DNS-Management-A-Practical-Operating-Model-for-Many-Client-Zones-768x402.png 768w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/10\/Reseller-Hosting-DNS-Management-A-Practical-Operating-Model-for-Many-Client-Zones.png 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-532177c elementor-widget elementor-widget-text-editor\" data-id=\"532177c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Reseller_Hosting_DNS_Management_A_Practical_Operating_Model_for_Many_Client_Zones\" >Reseller Hosting DNS Management: A Practical Operating Model for Many Client Zones<\/a><ul class='ez-toc-list-level-2' ><li class='ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Decide_who_is_authoritative_for_every_client_domain\" >Decide who is authoritative for every client domain<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Standardize_zone_creation_without_erasing_client-specific_records\" >Standardize zone creation without erasing client-specific records<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Control_A_and_AAAA_changes_through_a_deployment_process\" >Control A and AAAA changes through a deployment process<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Use_CNAMEs_with_awareness_of_zone_and_service_behavior\" >Use CNAMEs with awareness of zone and service behavior<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Treat_MX_and_email_records_as_a_separate_service_dependency\" >Treat MX and email records as a separate service dependency<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Keep_TTLs_purposeful\" >Keep TTLs purposeful<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Use_DNSSEC_only_with_ownership_and_rollback_clarity\" >Use DNSSEC only with ownership and rollback clarity<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Create_a_controlled_record-change_workflow\" >Create a controlled record-change workflow<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Prevent_zone_drift_across_migrations\" >Prevent zone drift across migrations<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Separate_branded_nameservers_from_DNS_operations\" >Separate branded nameservers from DNS operations<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Monitor_what_customers_experience\" >Monitor what customers experience<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Integrate_ServerFellows_without_assuming_undocumented_controls\" >Integrate ServerFellows without assuming undocumented controls<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Client_DNS_operating_table\" >Client DNS operating table<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Troubleshoot_from_delegation_inward\" >Troubleshoot from delegation inward<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Operational_DNS_checks_for_multi-client_hosting\" >Operational DNS checks for multi-client hosting<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#FAQs\" >FAQs<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#1_Which_DNS_controls_matter_across_a_reseller_client_portfolio\" >1. Which DNS controls matter across a reseller client portfolio?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#2_Can_a_reseller_manage_DNS_if_the_client_keeps_nameservers_elsewhere\" >2. Can a reseller manage DNS if the client keeps nameservers elsewhere?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#3_Should_every_client_use_the_same_DNS_template\" >3. Should every client use the same DNS template?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#4_How_should_resellers_handle_DNS_before_a_website_migration\" >4. How should resellers handle DNS before a website migration?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#5_Do_branded_nameservers_make_DNS_management_easier\" >5. Do branded nameservers make DNS management easier?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#6_What_DNS_records_are_most_important_for_hosted_email\" >6. What DNS records are most important for hosted email?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting-dns-management\/#Make_DNS_changes_reversible_and_explainable\" >Make DNS changes reversible and explainable<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h1 dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:10pt;\"><span class=\"ez-toc-section\" id=\"Reseller_Hosting_DNS_Management_A_Practical_Operating_Model_for_Many_Client_Zones\"><\/span><span style=\"font-size:22pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Reseller Hosting DNS Management: A Practical Operating Model for Many Client Zones<\/span><span class=\"ez-toc-section-end\"><\/span><\/h1><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Reseller hosting DNS management is the discipline of keeping authoritative records correct across multiple client domains while preserving clear ownership of changes. A reseller needs more than access to a zone editor. It needs a repeatable process for creating zones, changing records, controlling TTLs, handling email authentication, coordinating migrations, documenting exceptions, and proving what changed when a customer reports a problem.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Current cPanel &amp; WHM documentation provides DNS Zone Manager functions for records such as A, CNAME, and MX, along with broader DNS features. Those interfaces are useful tools, but the reseller&#8217;s operating model determines whether changes are safe at scale.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Decide_who_is_authoritative_for_every_client_domain\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Decide who is authoritative for every client domain<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Begin with an inventory that states where each domain&#8217;s authoritative DNS is hosted. Some customers may use the reseller&#8217;s nameservers; others may keep DNS at a registrar, CDN, or cloud DNS service. A hosting migration does not automatically move DNS authority.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For web hosting reseller DNS management, record the domain, registrar, authoritative nameservers, zone owner, website target, email provider, and whether DNSSEC is enabled. This turns a support ticket from &#8220;the site is down&#8221; into a bounded investigation.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Do not edit a local cPanel zone and assume the internet will use it. If the domain delegates elsewhere, the local change has no public effect.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Standardize_zone_creation_without_erasing_client-specific_records\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Standardize zone creation without erasing client-specific records<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Zone templates can reduce repetitive work for new accounts, but they should represent only safe defaults. Client domains often contain third-party verification records, external MX records, SaaS CNAMEs, and custom subdomains that must survive migrations.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A hosting reseller DNS management process should use a baseline template for records the reseller truly owns and a separate migration inventory for inherited records. When importing an existing client, compare the old authoritative zone with the proposed new zone before changing nameservers.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The objective is standardization with exceptions visible, not forcing every customer&#8217;s DNS into an identical shape.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Control_A_and_AAAA_changes_through_a_deployment_process\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Control A and AAAA changes through a deployment process<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Website IP changes are common during migrations, server moves, and dedicated-IP assignments. Treat them as planned changes with a source address, target address, expected TTL, and rollback condition.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">In reseller web hosting DNS management, lower the relevant TTL in advance when a migration plan benefits from shorter caching, wait for the old TTL to age out, then change the record at the agreed window. Afterward, query authoritative servers directly and confirm the application is serving correctly on the new address.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">If IPv6 is published through AAAA records, update and test it independently. A correct A record does not compensate for a stale AAAA record that directs some clients elsewhere.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Use_CNAMEs_with_awareness_of_zone_and_service_behavior\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Use CNAMEs with awareness of zone and service behavior<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">CNAME records are convenient for aliases, verification, and third-party services, but they cannot be substituted indiscriminately for every record type. Follow the target service&#8217;s current DNS instructions and avoid adding competing records at the same owner name where the DNS standard or provider prohibits it.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For reseller hosting DNS management, maintain a note explaining why externally managed CNAME targets exist. Otherwise, a future cleanup may delete a seemingly unfamiliar record that actually powers a client application.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">When a vendor asks for a temporary verification record, decide whether it can be removed after verification and record the removal date.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Treat_MX_and_email_records_as_a_separate_service_dependency\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Treat MX and email records as a separate service dependency<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Moving a website does not mean moving email. Before changing MX records, identify whether mail is hosted on the reseller platform, a dedicated mail provider, or a customer-managed service.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A web hosting reseller DNS management checklist should include MX priorities, SPF, DKIM and DMARC-related TXT records, autodiscovery records where applicable, and any vendor-specific verification data. cPanel&#8217;s Email Deliverability tools can help identify SPF and DKIM issues when cPanel is responsible for the relevant DNS, but external providers have their own requirements.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Never replace an existing SPF record by adding a second SPF policy without checking the resulting semantics. Email authentication changes deserve deliberate review.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Keep_TTLs_purposeful\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Keep TTLs purposeful<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">TTL controls how long recursive resolvers may cache a record. Very high values can slow planned migrations; very low values increase query frequency and do not eliminate all caching behavior.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For hosting reseller DNS management, define normal TTL ranges according to the DNS service and business need, then make temporary changes only for a reason. cPanel documentation notes a default TTL in some WHM contexts, but the actual value for a client zone should be read from the deployed system rather than assumed from documentation examples.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">After a migration, restore temporary low TTLs if the operating standard calls for it. Otherwise, one emergency change can become the permanent configuration for years.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Use_DNSSEC_only_with_ownership_and_rollback_clarity\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Use DNSSEC only with ownership and rollback clarity<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">DNSSEC can validate that DNS answers have not been altered between the authoritative source and validating resolver, but it adds a relationship between zone-signing keys and DS data at the parent. A broken chain can make a correctly hosted website unreachable to validating clients.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A reseller web hosting DNS management policy should identify who enables DNSSEC, where keys are generated, who updates DS records, and how migrations are sequenced. Do not toggle DNSSEC during an unrelated nameserver move unless the migration plan explicitly covers it.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">If a client uses external DNS, the reseller should not assume it controls the signing process simply because it hosts the website.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Create_a_controlled_record-change_workflow\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Create a controlled record-change workflow<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For small portfolios, a shared change log may be enough. Larger resellers benefit from a ticket or approval workflow for high-impact DNS changes. Capture the requested record, old value, new value, requester, approver, time, and verification result.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A reseller hosting DNS management workflow can classify changes by risk. Adding a vendor-verification TXT record is generally lower risk than replacing MX or changing the root A record. High-risk changes may require a second reviewer or a maintenance window.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The log is not bureaucracy for its own sake. It gives support staff evidence when a customer asks what changed before an outage.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Prevent_zone_drift_across_migrations\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Prevent zone drift across migrations<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Zone drift occurs when the active authoritative zone and the reseller&#8217;s expected template diverge over time. Some differences are legitimate; others are old records, forgotten temporary entries, or manual emergency changes.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For web hosting reseller DNS management, run periodic comparisons for critical clients or after major platform moves. Confirm that the authoritative service still contains required website, email, and verification records and that obsolete migration targets have been removed when safe.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Do not automate deletion merely because a record is not in a baseline template. Client-specific records require context before removal.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Separate_branded_nameservers_from_DNS_operations\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Separate branded nameservers from DNS operations<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><a href=\"https:\/\/serverfellows.com\/blog\/how-to-set-up-private-nameservers-for-reseller-hosting\/\" style=\"text-decoration:none;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#1155cc;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private nameservers for reseller hosting<\/span><\/a><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\"> affect how customers delegate domains, but they do not replace the need for sound zone management. A domain delegated to ns1.brand.example can still have incorrect MX records, a stale A record, or broken DNSSEC.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A hosting reseller DNS management article therefore should not treat nameserver branding as the whole DNS strategy. The reseller needs procedures for the records behind the nameserver identity, plus monitoring of the authoritative service itself.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">When branded nameserver IPs change, handle that as infrastructure change control and verify both registrar host data and client-zone authority.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Monitor_what_customers_experience\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Monitor what customers experience<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Authoritative server health, record correctness, and recursive resolution are different observations. Monitor at least a sample of client domains from outside the hosting network. Check authoritative NS responses and critical records, then verify public resolution through independent recursive resolvers.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For reseller web hosting DNS management, define alerting for conditions that matter: nameserver unreachable, domain delegation changed unexpectedly, critical record missing, or DNSSEC validation failure. Avoid noisy monitoring that reports every short-lived resolver difference as an outage.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The monitoring model should help support answering &#8220;where is the failure?&#8221; rather than just &#8220;DNS failed.&#8221;<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Integrate_ServerFellows_without_assuming_undocumented_controls\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Integrate ServerFellows without assuming undocumented controls<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The ServerFellows launch specification includes private branded nameservers, which makes DNS an important part of the planned reseller experience. For ServerFellows customers, <\/span><a href=\"https:\/\/serverfellows.com\/blog\/reseller-hosting\/\" style=\"text-decoration:none;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#1155cc;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">reseller hosting<\/span><\/a><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\"> DNS management should still document who can edit zones, what records are created automatically, and how DNS incidents are escalated.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The supplied plan tables do not describe every DNS capability, such as DNSSEC, zone-template permissions or API access. The provider should confirm those items before they are used in published claims or automated workflows.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A reseller can still prepare its inventory, change-control policy and migration checklist before the final platform details are known.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Client_DNS_operating_table\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Client DNS operating table<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><div dir=\"ltr\" style=\"margin-left:0pt;\" align=\"center\"><table style=\"border:none;border-collapse:collapse;\"><colgroup><col width=\"226\"><col width=\"226\"><col width=\"226\"><\/colgroup><thead><tr style=\"height:0pt\"><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Area<\/span><\/p><\/th><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Reseller record to maintain<\/span><\/p><\/th><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Typical validation<\/span><\/p><\/th><\/tr><\/thead><tbody><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Authority<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Registrar and active nameservers<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Parent NS query and direct authoritative query<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Website<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A\/AAAA\/CNAME targets<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Authoritative lookup plus application check<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Email<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">MX, SPF, DKIM, DMARC<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">DNS inspection plus mail-provider diagnostics<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">TTL<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Normal and temporary values<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Query the authoritative zone<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">DNSSEC<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Signing status and DS owner<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Validating resolver \/ DNSSEC diagnostic<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Changes<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Requester, old value, new value, timestamp<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Post-change lookup and ticket record<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Migration<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Old\/new zone comparison<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Before\/after record inventory<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Monitoring<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Critical domains and records<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">External authoritative and recursive checks<\/span><\/p><\/td><\/tr><\/tbody><\/table><\/div><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Troubleshoot_from_delegation_inward\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Troubleshoot from delegation inward<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">When a customer reports a DNS problem, first verify the registrar\/parent delegation. Then check whether the named authoritative servers are reachable and authoritative. Only after that should you inspect the specific record and application target.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A reseller hosting DNS management troubleshooting sequence avoids wasting time editing records on a server that is not authoritative. If DNS resolves correctly but the site still fails, move the investigation to the web server, TLS, application, or network layer rather than continuing to change DNS.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For email issues, check MX and authentication records before assuming the mailbox service itself is down.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Operational_DNS_checks_for_multi-client_hosting\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Operational DNS checks for multi-client hosting<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A monthly reseller hosting DNS management review can identify client domains whose authoritative nameservers changed without the reseller&#8217;s knowledge.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Before a bulk migration, reseller hosting DNS management should compare exported record inventories so external mail and SaaS entries survive the move.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For high-value clients, reseller hosting DNS management should record an explicit rollback target before changing root A, AAAA, or MX records.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">After a nameserver-platform change, reseller hosting DNS management should verify authoritative answers and not just recursive results cached by the office network.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">When staff permissions change, reseller hosting DNS management should be included in access reviews because one DNS credential can affect many customer services.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A quarterly reseller hosting DNS management review should compare authoritative service, registrar delegation, and documented client ownership before dormant errors become migration problems.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"FAQs\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">FAQs<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"1_Which_DNS_controls_matter_across_a_reseller_client_portfolio\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">1. Which DNS controls matter across a reseller client portfolio?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A buyer should know that reseller hosting DNS management involves authority, records, migrations, and change control across many customer domains. The reseller should identify where each domain&#8217;s DNS is hosted, preserve client-specific records, manage A\/AAAA\/CNAME\/MX\/TXT changes deliberately, coordinate DNSSEC when used, and verify public results after every high-impact change. A zone editor is only the tool; the operating process is what prevents one DNS mistake from affecting many clients.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"2_Can_a_reseller_manage_DNS_if_the_client_keeps_nameservers_elsewhere\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">2. Can a reseller manage DNS if the client keeps nameservers elsewhere?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The reseller can advise the client or provide the records that need to be created, but it cannot make authoritative public changes in a DNS service it does not control. For web hosting reseller DNS management, record whether DNS lives at the reseller, registrar, CDN, or another provider. Editing a local hosting-zone copy has no effect when the parent domain delegates to different nameservers.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"3_Should_every_client_use_the_same_DNS_template\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">3. Should every client use the same DNS template?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">No. A standard baseline is useful for records the reseller owns, but clients can have external email, SaaS verification, subdomains, and other requirements. Hosting reseller DNS management should preserve legitimate exceptions and document why they exist. During migration, compare the active old zone with the new one instead of replacing it wholesale with a generic template.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"4_How_should_resellers_handle_DNS_before_a_website_migration\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">4. How should resellers handle DNS before a website migration?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Inventory the active authoritative zone, identify the website records that will change, reduce relevant TTLs in advance when appropriate, preserve email and verification records, then change the target during the migration window. Reseller web hosting DNS management should verify the new authoritative answer and application behavior after the switch and retain a rollback plan until the migration is stable.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"5_Do_branded_nameservers_make_DNS_management_easier\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">5. Do branded nameservers make DNS management easier?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">They can make customer delegation and branding more consistent, but they do not simplify the content of the DNS zone by themselves. Reseller hosting DNS management still requires accurate records, DNSSEC coordination, migration planning, and monitoring. Branded nameservers are best viewed as the identity of the authoritative service; they do not automatically fix zone errors or remove the need for operational controls.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"6_What_DNS_records_are_most_important_for_hosted_email\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">6. What DNS records are most important for hosted email?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">MX records route incoming mail, while SPF, DKIM, and DMARC-related DNS records help with authentication and policy. The exact records depend on the mail provider. For web hosting reseller DNS management, preserve those values during hosting moves and follow the current instructions of the email service. Website and email DNS should be treated as linked but independent dependencies.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Make_DNS_changes_reversible_and_explainable\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Make DNS changes reversible and explainable<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Strong reseller hosting DNS management means the reseller can answer three questions for any client: who is authoritative, what the important records are, and what changed recently. That clarity is more valuable than memorizing every DNS record type.<\/span><\/p><p><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Build an inventory, standardize safe defaults, preserve client exceptions, verify changes externally, and keep rollback information. With those controls, DNS becomes a manageable part of a multi-client hosting service instead of the source of mysterious portfolio-wide outages.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Reseller Hosting DNS Management: A Practical Operating Model for Many Client Zones Reseller hosting DNS management is the discipline of [&hellip;]<\/p>","protected":false},"author":25481,"featured_media":6237,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[341],"tags":[],"class_list":["post-6183","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns-hosting-uae"],"_links":{"self":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/6183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/users\/25481"}],"replies":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/comments?post=6183"}],"version-history":[{"count":13,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/6183\/revisions"}],"predecessor-version":[{"id":6247,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/6183\/revisions\/6247"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/media\/6237"}],"wp:attachment":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/media?parent=6183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/categories?post=6183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/tags?post=6183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}