DNS has a reputation for being scary because mistakes are visible and propagation makes cause and effect feel disconnected. But the mental model is small: DNS is the address book that turns a name people can remember into a location computers can reach.
The records that matter
- A record: points a name at a server's IP address. The root of most setups.
- CNAME: points a name at another name. Hosts love these because they can move infrastructure without you touching anything.
- MX: where your email gets delivered. The record people forget about until mail stops arriving.
- TXT: free-form proof-of-ownership and email authentication (SPF, DKIM, DMARC), which is also the backbone of email deliverability.
TTL and the waiting game
Every record carries a time-to-live: how long the rest of the internet may cache the answer. Before a planned change, lower the TTL to five minutes a day ahead; afterwards, raise it back. That single habit removes most of the anxiety from migrations.
The orange cloud
On Cloudflare, each record has a proxy toggle. Grey means DNS only, a plain address book entry. Orange means traffic routes through Cloudflare, which unlocks caching, SSL, and filtering, and also hides your server's real IP from the public. Web traffic generally belongs on orange; mail and verification records must stay grey.
Keep a copy of your zone exported somewhere safe, change one thing at a time, and DNS becomes bookkeeping instead of folklore. When a site move is on the table, this is also the layer that decides how smooth a deployment cutover feels.