How do I properly set DNS for my domain in Route 53?

Question

**Hello,**

**I believe all my records are OK but when I run**

`nslookup -type=NS example.com`

*(I use my domain name and not example, of course)*

**I get**

DNS request timed out.

timeout was 2 seconds.

Server:  UnKnown

Address:  192.168.0.1

DNS request timed out.

timeout was 2 seconds.

DNS request timed out.

timeout was 2 seconds.

**I think my NS record is the very same that came by default, I don't think I changed anything.**

Record name

example.com

Record type

NS

Value

ns-869.awsdns-44.net.

ns-394.awsdns-49.com.

ns-1429.awsdns-50.org.

ns-1629.awsdns-11.co.uk.

Alias

No

TTL (seconds)

172800

Routing policy

Simple

iBehr · Accepted Answer

Your correct name servers are:  
ns-1629.awsdns-11.co.uk  
ns-1429.awsdns-50.org  
ns-394.awsdns-49.com  
ns-869.awsdns-44.net

You can tell this by running dig against them -- they respond with NS records.  You have changed them to return the incorrect NS records though.

`dig @ns-869.awsdns-44.net arculamystica.com -t NS`

Change the name server records in the hosted zone to the 4 listed above.
(Querying the other 4 name servers there is no response for your domain, so they are not correct.)

Did you register the domain through Route 53?

**If yes:**  
Please go to the Route 53 Console, on the left choose Registered Domains.  Select your domain in the main window.  You will need to set the name servers to match the 4 listed above

**If no (the domain is registered through another registrar):**  
You will need to login to the registrar where the domain is registered and edit the NS records to match the 4 listed above.

Once you have made the updates, you will have to wait for TTLs to expire before DNS works across the internet.  You can create a test record in the zone (something like an A record for test and point to 9.9.9.9) and then run the following to verify it works

`dig @ns-869.awsdns-44.net test.arculamystica.com +short`

Hope this helps!

Max Clements · Answer

Can you give your actual DNS domain name - so that folks here can do some lookup to see if you have configured it correctly.

Riku_Kobayashi · Answer

Hello.

I checked the NS record for "arculamystica.com" using the "dig" command.
As a result, the name cannot be resolved as shown below.

dig arculamystica.com ns

; <<>> DiG 9.16.1-Ubuntu <<>> arculamystica.com ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;arculamystica.com.             IN      NS

;; Query time: 1468 msec
;; SERVER: 2405:6581:bd60:600:9a2d:baff:fe51:9c0#53(2405:6581:bd60:600:9a2d:baff:fe51:9c0)
;; WHEN: 火  6月 04 20:44:30 JST 2024
;; MSG SIZE  rcvd: 46

I also checked the NS record with "whois".
As a result, you can see four records listed in "Name Server".
Does it match the NS record registered in Route53's hosted zone?
If they do not match, try changing the Route53 hosted zone's NS record to match the "whois" result.

whois arculamystica.com
   Domain Name: ARCULAMYSTICA.COM
   Registry Domain ID: 2884189385_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.registrar.amazon.com
   Registrar URL: http://registrar.amazon.com
   Updated Date: 2024-05-24T11:21:13Z
   Creation Date: 2024-05-24T11:11:05Z
   Registry Expiry Date: 2025-05-24T11:11:05Z
   Registrar: Amazon Registrar, Inc.
   Registrar IANA ID: 468
   Registrar Abuse Contact Email: abuse@amazonaws.com
   Registrar Abuse Contact Phone: +1.2024422253
   Domain Status: ok https://icann.org/epp#ok
   Name Server: NS-1101.AWSDNS-09.ORG
   Name Server: NS-1574.AWSDNS-04.CO.UK
   Name Server: NS-508.AWSDNS-63.COM
   Name Server: NS-520.AWSDNS-01.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

How do I properly set DNS for my domain in Route 53?

Relevant content