Zonebraid
Rehearse DNS changes with TTL horizons, old-and-new targets, resolver probes, dependencies, rollback gates, and handoff evidence.
Focused field tools
Lower TTL early enough to observe the change before migration day.
Compare every old and new answer at the authoritative source.
Sample independent recursive resolvers and preserve timestamped answers.
Check parent and child nameserver intent, glue, and serial state.
Plan DS, key, signer, and validation transitions separately.
Review MX, SPF, DKIM, DMARC, reverse DNS, and delivery queues.
Zonebraid models recorded DNS intent and observations; it does not query or modify live DNS. Confirm delegation, DNSSEC, mail policy, provider behavior, cache variance, health checks, certificates, and rollback authority with current operational evidence.