this name is served by the US-Seattle region of a small authoritative DNS cluster i run: a hidden primary, two Knot secondaries per region, and dnsdist on the public IPs. each demo subdomain is delegated to one region; this one to US-Seattle, nameservers ns-sea1 193.42.38.8, ns-sea2 193.42.38.18.
the blocks below run on page load.
dig +trace us-sea.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +trace +tries=1 +timeout=3 us-sea.example-site.club A ;; global options: +cmd . 4163 IN NS j.root-servers.net. . 4163 IN NS l.root-servers.net. . 4163 IN NS d.root-servers.net. . 4163 IN NS g.root-servers.net. . 4163 IN NS b.root-servers.net. . 4163 IN NS m.root-servers.net. . 4163 IN NS h.root-servers.net. . 4163 IN NS a.root-servers.net. . 4163 IN NS i.root-servers.net. . 4163 IN NS k.root-servers.net. . 4163 IN NS c.root-servers.net. . 4163 IN NS e.root-servers.net. . 4163 IN NS f.root-servers.net. ;; Received 239 bytes from 127.0.0.53#53(127.0.0.53) in 0 ms ;; UDP setup with 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30) for us-sea.example-site.club failed: network unreachable. ;; UDP setup with 2001:dc3::35#53(2001:dc3::35) for us-sea.example-site.club failed: network unreachable. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS 54682 8 2 4FC0DBB4F04BE413BA1C0B1E92F4C5F0CCEBF7856370E20671AF6417 499DB258 club. 86400 IN RRSIG DS 8 1 86400 20260709050000 20260626040000 54393 . mFu6hrxiKkh+msH9Z97vUR/G1P0XN4Ik6VxdixvwviLHSQHBQOkdM8sk pfa5P+nU0Xj5iHCrai5DvnCgq+Wv0Q5/4UdRc3wTIMi735OCjNV3EYNW dbr5AzSCPIcsVaYP67lVqGX3p6+qncIHu1lpsbDp6sXIA3bpWnQuLESu 6Q2oESRJ9eTXf9y5KrI+l5UsLgCa784Stz7rPL0TwLaMXIW/1+eXUSan KWWf6c1iAova79mZtKHJUfG1dibgXgM6og/RzQjuWO8iDCyOOmEPTZEy hL9ewImDasjbm5vJgctyaLc9pbSeN/YXoyjGMvDKf/QupMSCakkzPMnV +QT/fQ== ;; Received 806 bytes from 192.112.36.4#53(g.root-servers.net) in 45 ms ;; UDP setup with 2610:a1:1073::d7#53(2610:a1:1073::d7) for us-sea.example-site.club failed: network unreachable. ;; UDP setup with 2001:dcd:1::10#53(2001:dcd:1::10) for us-sea.example-site.club failed: network unreachable. example-site.club. 3600 IN NS maceio.ns.porkbun.com. example-site.club. 3600 IN NS curitiba.ns.porkbun.com. example-site.club. 3600 IN NS salvador.ns.porkbun.com. example-site.club. 3600 IN NS fortaleza.ns.porkbun.com. p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN NSEC3 1 1 0 - P7NNM7LDMDSVGHPFLL7BLLI1SP6KVP0G NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 h93nrr909cuup0n56glppgpts657qolq.club. 900 IN NSEC3 1 1 0 - H9D4SD01FU1SJTDJL88BM95H62GEEQ04 NS DS RRSIG h93nrr909cuup0n56glppgpts657qolq.club. 900 IN RRSIG NSEC3 8 2 900 20260706005242 20260622004037 15345 club. VsVdCLUZVBun+7QEVzBFUSYOIreXyZUIAKjtKOoX6bJ4Bc1K/F+XqP5n U18BJMzXt+MeP6EI2WuBl5273+gxJHxwj7o0dXACh7eRmku8CVCLBx/o rlsannoEtR2uVvMtDm7sN0TEawV2tbZrHIE8m+Wjk3WP5VoWKFJcEYeG FEj0Mi7Pjo6eru0NegadgLUmbgSIYqfmEB7R7S97NOWMZA== p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN RRSIG NSEC3 8 2 900 20260707074916 20260623072918 15345 club. oIh/RMTJ1015x+862Zh7WtlcQpdyqXfG9WBZMQTu2gyB3oi4Q9+6mpYG 19V6LS6Jbi5MIYjBqqxWNWbyHnkXbSz4tIP36ysVCV2ubo7AHMlKwsRm M9qczGKrH7iqKPANHcT9Cy7pI1TrfsMymkMUdTaCK0L/pcaQZRuypl6b /Eagtl1xhWVKj7kuZOAHpk63bVOu8ChS2YvQ4ib78+A+HQ== ;; Received 744 bytes from 156.154.145.215#53(ns2.dns.nic.club) in 28 ms us-sea.example-site.club. 600 IN NS ns-sea1.geodns.pp.ua. us-sea.example-site.club. 600 IN NS ns-sea2.geodns.pp.ua. ;; Received 109 bytes from 162.159.11.180#53(maceio.ns.porkbun.com) in 4 ms us-sea.example-site.club. 1370 IN A 95.164.20.20 ;; Received 69 bytes from 193.42.38.8#53(ns-sea1.geodns.pp.ua) in 187 ms
# .club hands example-site.club to its DNS host (porkbun); porkbun delegates us-sea.example-site.club to ns-sea1 (193.42.38.8), ns-sea2 (193.42.38.18), which are the US-Seattle dnsdist nodes; that region answers.
dig +tcp @193.42.38.8 us-sea.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +tcp +timeout=3 @193.42.38.8 us-sea.example-site.club A ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42345 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;us-sea.example-site.club. IN A ;; ANSWER SECTION: us-sea.example-site.club. 1371 IN A 95.164.20.20 ;; Query time: 178 msec ;; SERVER: 193.42.38.8#53(193.42.38.8) (TCP) ;; WHEN: Fri Jun 26 12:31:59 UTC 2026 ;; MSG SIZE rcvd: 69
# the 'aa' flag means this node answers authoritatively.
dig +short @193.42.38.8 geodns.pp.ua +subnet=1.2.3.0/24 dig +short @193.42.38.8 geodns.pp.ua +subnet=8.8.8.0/24 # any other subnet
203.0.113.7 95.164.20.20
# geo lives on the geodns.pp.ua zone (mod-geoip + EDNS Client Subnet) and is the same from every region; asked here at this region's node 193.42.38.8. the answer depends on the client subnet, not the node.
run on ubuntu24 at 2026-06-26 12:32:00 UTC. refresh to re-run.