New DNS record stuck (NXDOMAIN) on public resolvers, correct at authoritative nameserver

Support
1

Hi Netlify team,

Netlify site: harmonious-faloodeh-1b31d7.netlify.app (custom domain: debitumenspecialist.nl, using Netlify DNS).

We added a new A record: koppeljeagenda.debitumenspecialist.nl → 195.201.88.172. It has now been several hours and it still does not resolve on any public resolver (tested 1.1.1.1, 8.8.8.8, 208.67.222.222 - all return NXDOMAIN).

However, querying your own authoritative nameserver directly returns the correct answer:

nslookup koppeljeagenda.debitumenspecialist.nl dns1.p08.nsone.net → 195.201.88.172 (correct)

The apex domain and other existing records (www, etc.) on the same zone resolve fine everywhere. Only this new record is affected.

We tried deleting and recreating the record in the Netlify DNS panel, which did not resolve it.

This looks like it could be a DNSSEC signing/propagation issue specific to newly-added records in an already-signed zone (e.g. an NSEC/NSEC3 proof-of-nonexistence not being updated across your DNS infrastructure). Could someone take a look at the zone for debitumenspecialist.nl?

Thanks in advance!

2

Update: found the root cause on my end, not a Netlify issue. The domain’s registrar/NS delegation (debitumenspecialist.nl) was still pointing to a third-party DNS provider (Wix), not to Netlify’s nameservers - so any new record created in the Netlify DNS zone was never actually reachable from public resolvers, even though it was correct at Netlify’s authoritative nameserver. Only the pre-existing records (which were separately mirrored/managed at the actual authoritative provider) were resolving. I’ve now added the record directly at the correct authoritative DNS provider and it’s propagating as expected. Closing this out - thanks!