Key facts
- Fixed quote for each migration
- Full inventory of every record before anything changes
- TTLs lowered a day or two ahead
- DNSSEC DS record removed or replaced before the switch
- Mail records checked first, since email failures are slowest to notice
- Nameserver change can take up to 24 to 48 hours to be seen everywhere
Why DNS moves go wrong
A DNS migration fails in quiet ways. The website usually keeps working because someone remembered the A record. What gets missed is the DKIM key for the newsletter tool, the verification TXT for Microsoft 365, the SRV record for the phone system, or the CNAME that makes the customer portal work. Nobody notices until invoices land in spam or a supplier says your email bounced.
Many DNS panels also hide records, or show only the ones they created themselves. So the first step is always finding out what really exists.
Step one: the record inventory
We build a full list of every record at the current provider, from the panel where possible and from outside lookups to catch anything missing. For each record we note the name, type, value, TTL and what it is for. Anything we cannot explain gets queried with you rather than silently dropped or copied.
| Check | Why it matters |
|---|---|
| MX and mail hostnames | Missed mail records stop email arriving |
| SPF, DKIM, DMARC | Missing ones push mail into spam |
| Verification TXT | Services such as Microsoft 365 can lose their link to the domain |
| Subdomains | Shops, portals and booking systems often live here |
| DS record at the registrar | A stale one breaks resolution for validating resolvers |
Step two: preparing the switch
A day or two before the move we lower the TTL on records at the old provider, for example to 300 seconds, so caches let go of old answers quickly. We build the new zone and compare it with the inventory line by line.
If DNSSEC is enabled, we remove or replace the DS record at the registrar before changing nameservers. Skip this and validating resolvers will refuse to resolve your domain at all. Read more on DNSSEC.
Step three: switching and checking
We change the nameservers at your registrar. If your domain is in the dijitul client portal we do this ourselves; otherwise we walk you through it. Nameserver changes can take up to 24 to 48 hours to be seen everywhere, so for that window both providers must give the same answers. We leave the old zone in place until the move has settled.
We then test web, email sending and receiving, and each third-party service from outside your network. Moving onto Cloudflare specifically? See Cloudflare setup.
Provider quirks we watch for
- Apex aliases: some providers offer their own alias record at the root of the domain. Standard DNS has no CNAME at the apex, so the new provider needs an equivalent, such as Cloudflare's CNAME flattening, or a plain A record.
- Hidden defaults: some hosts answer for names like webmail or autodiscover automatically, without listing them in the panel.
- Own-name nameservers: if the old nameservers sit inside your domain, the glue records at the registrar need tidying up afterwards.
- Long TXT values: DKIM keys over 255 characters must be split correctly, or the key breaks when copied.
- Several domains: we move them in planned batches, starting with the least busy.
How dijitul helps
DNS migrations are quoted as a fixed price once we have seen your current set-up, because one domain with ten records and twenty domains with hundreds are very different jobs. Smaller follow-up changes are £45 an hour + VAT.
Moving your email provider at the same time? Read moving email provider. Then ask for a quote or call 01623 650333.
How it works and what it costs
Domains are priced live in the client portal. DNS management and 10 mailboxes are included with dijihost Complete Hosting at £1 a day + VAT. On their own, DNS and email set-up is £45 an hour + VAT or a fixed quote.
Tell us what you have
Your domains, who they are registered with, where your DNS and email live today, and what you want to change.
Plan the change
We list every DNS record and mailbox first, so nothing is forgotten, and agree a time to switch.
Make the switch
Transfers, nameserver changes, DNS records and mailbox moves, done carefully with low TTLs and a rollback plan.
Check it works
We test the website, email delivery, SPF, DKIM and DMARC from the outside before calling it done.
Look after it
Renewals, records and email stay looked after, and you can call a person when something changes.
Frequently asked questions
How long does a DNS migration take?
The preparation, inventory and zone build usually take less time than the wait. Once nameservers change, it can take up to 24 to 48 hours for every resolver to see the new provider. Lowering TTLs in advance shortens the wait for individual records.
Will my email stop working during a DNS move?
It should not, provided the new zone has exactly the same MX, SPF, DKIM and DMARC records as the old one. Both providers give the same answers during the changeover, so mail flows either way. dijitul checks mail records first because email problems are noticed last.
What happens if DNSSEC is on when I move?
If the old DS record stays at the registry and the new provider signs with different keys, validating resolvers reject your domain and it stops resolving for many people. dijitul removes or replaces the DS record at the registrar before switching nameservers to avoid this.
Why lower the TTL before a migration?
TTL tells other servers how long to cache an answer. If a record has a long TTL, old answers linger after the move. Lowering it, for example to 300 seconds, a day or two beforehand means caches refresh quickly once the new provider is live.
How is a DNS migration priced?
dijitul gives a fixed quote for each migration once we have seen how many domains and records are involved. Small follow-up changes after the move are £45 an hour + VAT. If we will also host your website, DNS is included with dijihost Complete Hosting.
Do I need to move my domain registration too?
No. DNS provider and registrar are separate. You can leave the domain where it is and only change the nameservers. If you want everything in one place, domains can also be transferred into the dijitul client portal as a separate step.
Related
Get domains, DNS and email sorted
Set up properly, records checked, and real people to call. DNS and email are included with dijihost hosting.