this name is served by the US-Ashburn region of a small authoritative DNS cluster i run: a hidden primary, two Knot secondaries per region, and dnsdist on the public IPs. each demo subdomain is delegated to one region; this one to US-Ashburn, nameservers ns-ash1 185.33.87.194, ns-ash2 79.141.162.5.
the blocks below run on page load.
dig +trace us-ash.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +trace +tries=1 +timeout=3 us-ash.example-site.club A ;; global options: +cmd . 4543 IN NS h.root-servers.net. . 4543 IN NS k.root-servers.net. . 4543 IN NS d.root-servers.net. . 4543 IN NS l.root-servers.net. . 4543 IN NS a.root-servers.net. . 4543 IN NS f.root-servers.net. . 4543 IN NS m.root-servers.net. . 4543 IN NS i.root-servers.net. . 4543 IN NS g.root-servers.net. . 4543 IN NS b.root-servers.net. . 4543 IN NS j.root-servers.net. . 4543 IN NS e.root-servers.net. . 4543 IN NS c.root-servers.net. ;; Received 239 bytes from 127.0.0.53#53(127.0.0.53) in 0 ms ;; UDP setup with 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30) for us-ash.example-site.club failed: network unreachable. club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS 54682 8 2 4FC0DBB4F04BE413BA1C0B1E92F4C5F0CCEBF7856370E20671AF6417 499DB258 club. 86400 IN RRSIG DS 8 1 86400 20260709050000 20260626040000 54393 . mFu6hrxiKkh+msH9Z97vUR/G1P0XN4Ik6VxdixvwviLHSQHBQOkdM8sk pfa5P+nU0Xj5iHCrai5DvnCgq+Wv0Q5/4UdRc3wTIMi735OCjNV3EYNW dbr5AzSCPIcsVaYP67lVqGX3p6+qncIHu1lpsbDp6sXIA3bpWnQuLESu 6Q2oESRJ9eTXf9y5KrI+l5UsLgCa784Stz7rPL0TwLaMXIW/1+eXUSan KWWf6c1iAova79mZtKHJUfG1dibgXgM6og/RzQjuWO8iDCyOOmEPTZEy hL9ewImDasjbm5vJgctyaLc9pbSeN/YXoyjGMvDKf/QupMSCakkzPMnV +QT/fQ== ;; Received 762 bytes from 192.58.128.30#53(j.root-servers.net) in 1 ms example-site.club. 3600 IN NS salvador.ns.porkbun.com. example-site.club. 3600 IN NS maceio.ns.porkbun.com. example-site.club. 3600 IN NS curitiba.ns.porkbun.com. example-site.club. 3600 IN NS fortaleza.ns.porkbun.com. p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN NSEC3 1 1 0 - P7NNM7LDMDSVGHPFLL7BLLI1SP6KVP0G NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 p7ngjc7oaadjm89746jjos176dv5g8f9.club. 900 IN RRSIG NSEC3 8 2 900 20260707074916 20260623072918 15345 club. oIh/RMTJ1015x+862Zh7WtlcQpdyqXfG9WBZMQTu2gyB3oi4Q9+6mpYG 19V6LS6Jbi5MIYjBqqxWNWbyHnkXbSz4tIP36ysVCV2ubo7AHMlKwsRm M9qczGKrH7iqKPANHcT9Cy7pI1TrfsMymkMUdTaCK0L/pcaQZRuypl6b /Eagtl1xhWVKj7kuZOAHpk63bVOu8ChS2YvQ4ib78+A+HQ== h93nrr909cuup0n56glppgpts657qolq.club. 900 IN NSEC3 1 1 0 - H9D4SD01FU1SJTDJL88BM95H62GEEQ04 NS DS RRSIG h93nrr909cuup0n56glppgpts657qolq.club. 900 IN RRSIG NSEC3 8 2 900 20260706005242 20260622004037 15345 club. VsVdCLUZVBun+7QEVzBFUSYOIreXyZUIAKjtKOoX6bJ4Bc1K/F+XqP5n U18BJMzXt+MeP6EI2WuBl5273+gxJHxwj7o0dXACh7eRmku8CVCLBx/o rlsannoEtR2uVvMtDm7sN0TEawV2tbZrHIE8m+Wjk3WP5VoWKFJcEYeG FEj0Mi7Pjo6eru0NegadgLUmbgSIYqfmEB7R7S97NOWMZA== ;; Received 744 bytes from 37.209.194.10#53(b.nic.club) in 30 ms ;; UDP setup with 2400:cb00:2049:1::a29f:a96#53(2400:cb00:2049:1::a29f:a96) for us-ash.example-site.club failed: network unreachable. ;; UDP setup with 2400:cb00:2049:1::adf5:3a25#53(2400:cb00:2049:1::adf5:3a25) for us-ash.example-site.club failed: network unreachable. us-ash.example-site.club. 600 IN NS ns-ash1.geodns.pp.ua. us-ash.example-site.club. 600 IN NS ns-ash2.geodns.pp.ua. ;; Received 109 bytes from 173.245.58.37#53(curitiba.ns.porkbun.com) in 2 ms us-ash.example-site.club. 1746 IN A 95.164.20.20 ;; Received 69 bytes from 185.33.87.194#53(ns-ash1.geodns.pp.ua) in 134 ms
# .club hands example-site.club to its DNS host (porkbun); porkbun delegates us-ash.example-site.club to ns-ash1 (185.33.87.194), ns-ash2 (79.141.162.5), which are the US-Ashburn dnsdist nodes; that region answers.
dig +tcp @185.33.87.194 us-ash.example-site.club
; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> +tcp +timeout=3 @185.33.87.194 us-ash.example-site.club A ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11049 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;us-ash.example-site.club. IN A ;; ANSWER SECTION: us-ash.example-site.club. 1746 IN A 95.164.20.20 ;; Query time: 126 msec ;; SERVER: 185.33.87.194#53(185.33.87.194) (TCP) ;; WHEN: Fri Jun 26 12:25:38 UTC 2026 ;; MSG SIZE rcvd: 69
# the 'aa' flag means this node answers authoritatively.
dig +short @185.33.87.194 geodns.pp.ua +subnet=1.2.3.0/24 dig +short @185.33.87.194 geodns.pp.ua +subnet=8.8.8.0/24 # any other subnet
203.0.113.7 95.164.20.20
# geo lives on the geodns.pp.ua zone (mod-geoip + EDNS Client Subnet) and is the same from every region; asked here at this region's node 185.33.87.194. the answer depends on the client subnet, not the node.
run on ubuntu24 at 2026-06-26 12:25:39 UTC. refresh to re-run.