NS record

An NS (nameserver) record tells the DNS system which servers are authoritative for a domain. Point to the wrong nameservers, your domain goes dark. Point to the right ones, traffic flows. Each domain needs at least two NS records for redundancy—one primary, one backup. When you register a domain, you get default nameservers from your registrar or hosting provider. You can change them anytime to point at your own infrastructure, a CDN, or a privacy-focused DNS operator. NS records live at the registry level, not just in your zone file—changing them propagates slowly (24–72 hours typical). If you're running your own authoritative nameserver or using a bulletproof DNS provider, you control the NS records and thus control what IPs resolve to your domain. This matters for censorship resistance: a hostile ISP or government can't block your domain if your nameservers are outside their jurisdiction. Also matters for performance: poor nameserver choices = slow lookups, failed mail delivery, missed traffic.