Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

DNSViz helps you inspect how a domain resolves and whether its DNSSEC authentication chain is working. Its graph maps the path from the DNS root toward the domain, shows DNS records and signatures, and flags detected configuration problems. The web service currently allows fresh analyses, but its maintenance notice says it cannot load historical analyses or save new ones to its database.

What DNSViz does—and what it does not do

The DNSViz project describes it as “a tool for visualizing the status of a DNS zone.” It was created to help people understand and troubleshoot DNSSEC deployment by showing a domain’s DNSSEC authentication chain and its resolution path through the DNS namespace, then listing detected errors. See the DNSViz home page.

DNSViz is a diagnostic tool, not a DNS host or a repair service. It reports behavior observed during an analysis; it does not change registrar settings, authoritative-server configuration, or records at your DNS provider. If the graph identifies a problem, you must make any required change at the system responsible for that configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check the current web-service limitation

The DNSViz home page currently says the service is in maintenance mode and lacks access to its back-end database. It can run new analyses, but cannot load historical analyses or save new ones to its database. That means you can use the web interface for a fresh check, but should not rely on it to retrieve an earlier result or retain a history there. Because service status can change, check the notice on the live site before depending on a particular capability.

#1 Best Overall
Sale
SEESII Nanovna-H Vector Network Analyzer,Upgraded HW3.7 9KHz-1.5GHz MF HF VHF UHF Antenna Analyzer, Measuring S Parameters, Voltage Standing Wave Ratio,Phase,Delay,Smith Chart,Support Data Storage
  • Upgraded Nanovna-H HW3.7: SeeSii Nanovna-H Vector Network Analyzer is developed by Hugen. With latest 3.7 version,9KHz-1.5GHz measure range,2.8 inch LCD touchscreen,mini and portable design.This Antenna Analyzer is provides outstanding vector network measurement capabilities and perfect for evaluating antenna resonance and SWR.It is a very mini handy & smart analyzer for electronics engineer, amateur radio operators or radio diy amateurs
  • Improved Frequency Algorithm: The enhanced frequency algorithm uses the odd harmonic extension of the si5351, supporting measurements up to 1.5GHz. The metal shield reduces external interference, improving accuracy. The si5351 direct output offers 70dB dynamic range (50K-300MHz), 60dB (300M-900MHz), and 40dB (900M-1.5GHz). The default firmware supports antenna performance measurement
  • Multi TX/RX Function: The default firmware is mainly used for antenna performance measurement. The TX/RX method can measure the complete S11/S21 parameters (need to manually replace the transceiver port wiring)
  • Android and PC Software Control: The NanoVNA analyzer uses NanoVNASaver software, which connects to the device, extracts data, and saves it in Touchstone format for display on a computer
  • Built-in Micro-SD Port & Time Display: The lastest antenna analyzer with MicroSD card port,so you can save field test data or screens to a MicroSD card at any time,support up to 32GB memory card. (Not include in the pacakge).In addition, different from old version NanoVNAs, the date and time can be customized, which is convenient for you to further record and save data..The default firmware main function is used for antenna performance measurement

Run a fresh analysis of a domain

  1. Open dnsviz.net and enter the domain you want to inspect in the analysis form.

  2. Start the analysis and allow DNSViz to collect the DNS responses it needs. A fresh analysis reflects the DNS behavior available to the tool at that time.

  3. Inspect the visualization and its warnings or errors. Follow the authentication chain and resolution path rather than treating a single node or line color as a complete diagnosis.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #2
    Internet Speed & Buffering Test for Fire TV – WiFi Speed Test, Ping, DNS, Streaming Quality & Network Doctor
    • - Check Fire TV internet speed
    • - Test response time, DNS, jitter, and HTTP loading
    • - See likely HD and 4K streaming readiness
    • - Get practical buffering troubleshooting steps
    • - Remote-friendly, no account, no ads
  4. If you need a repeatable record, use the command-line suite to retain output locally; the web service’s current maintenance notice says new analyses are not saved to its database.

Read the DNSSEC graph without jumping to conclusions

The official DNSSEC visualization guide describes a graph built from zones, delegations, resource record sets (RRsets), DNSKEY and DS records, signatures, negative responses, and related DNSSEC data. A zone is grouped by its origin and labeled with the time it was last analyzed. RRsets appear as rounded rectangular nodes; common examples include SOA, A, AAAA, MX, and CNAME.

Follow the delegation and authentication chain

Delegation edges show how a child zone is connected to its parent and convey whether the delegation is secure, insecure, bogus, lame, or incomplete. In the documented legend, a secure delegation uses a solid blue line, a bogus one a dashed red line, and lame or incomplete states a dashed yellow line. An insecure delegation is not the same as a broken secure chain: it indicates that DNSSEC authentication is not being provided across that delegation. Use the graph’s full context and accompanying warning details to understand the state; do not diagnose from color alone.

Rank #3
Fluke Networks DSX2-8000QI Cable Analyzer
  • Versiv™ modular design supports copper certification, fiber optic loss, OTDR testing and fiber end-face inspection
  • Unmatched speed for Cat 6A, 8, Class FA, I/II and all current standards
  • ProjX™ system manages job requirements and progress from set-up to systems acceptance, making sure all tests are completed correctly
  • Taptive™ user interface simplifies set-up, and eliminates errors
  • Analyze test results and create professional test reports using LinkWare™ management software

Inspect records, signatures, and warnings

RRset nodes show the records involved in resolution. DNSSEC-specific nodes and links include DNSKEY and DS records, RRSIG signatures, and denial-of-existence records such as NSEC or NSEC3. The guide also covers CDNSKEY and CDS RRsets and wildcard-related information. DNSKEY decorations can indicate details such as the SEP bit, revoke bit, and whether a key is treated as a trust anchor.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When DNSViz reports an error or warning, use it to locate the relevant zone, delegation, record set, or signature, then verify which party controls that item before changing anything. A graph can reveal where observed data fails to form the expected chain, but it does not by itself establish which provider setting should be changed.

Choose the web interface or local command-line workflow

DNSViz is also available as a command-line suite in the official project repository. The repository describes commands for collecting DNS query results, assessing them, and producing graphical or textual output. This route is better suited to workflows where you want to keep probe data or create repeatable outputs; it requires local installation and management of the project’s current dependencies.

Rank #4
SEESII Nanovna-H Vector Network Analyzer with SMA Adapter, HW3.7 9KHz-1.5GHz MF HF VHF UHF Antenna Analyzer, Measuring S Parameters, Voltage Standing Wave Ratio,Phase,Delay,Smith Chart
  • NEW UPGRADED VERSION: This Vector Network Analyzer added battery circuit management, more secure. Redesigned PCB, you can connect to mobile phone with Type C-Type C cable( original PCB needs OTG cable), see a clear HD image on your phone. Designed a practical and simple control application on PC, you can download touchstone(SNP) files for radio design and simulation software. Moreover, added a shell case, which is protective and dust-proof
  • IMPROVED HIGH ACCURACY: HF VHF UHF Antenna Analyzer Measuring added a shell case, which is protective and dust-proof.The metal shield is designed to reduce the external interference and improve the measurement accuracy
  • IMPROVED FREQUENCY ALGORITHM RANGE: Frequency range is 9KHz -1.5GHz .The improved frequency algorithm can use the odd harmonic extension of si5351 to support the measurement frequency up to 1.5GHz. The 50K-300MHz frequency range of the si5351 direct output provides better than 70dB dynamic, The extended 300M-900MHz band provides better than 60dB of dynamics, and the 900M-1.5GHz band is better than 40dB of dynamics
  • MINI & PORTABLE:Upgraded NanoVNA that provides perfect vector network measurement capabilities, tiny and handheld, stand-alone with 2.8-inch LCD display, portable with battery powered or USB powered.Built in 650mAh battery, could work for 2 hours continuously, if need extra working time, it can be connected to power bank or power source
  • WHAT CAN YOU GET: Upgraded NanoVNA hostx1, USB Type-C data cable x1, 30mm SMA male to male RG174 RF cable x2, SMA simple calibration kit x1, SMA female to female connector x1
Route Useful when Output or control Trade-off
DNSViz web service You need a fresh analysis without setting up local software. Interactive DNSSEC visualization and reported errors. Current maintenance notice says historical analyses are unavailable and new analyses are not saved to the database.
DNSViz command line You want a local, repeatable workflow, including pre-deployment checks. Repository documents saved JSON probe data, graphs in image or HTML form, and text output; commands can query recursive resolvers or authoritative servers. You must install the suite and check current release, dependency, and command documentation.

The repository documents five subcommands: probe gathers queries and responses, grok assesses collected results, graph produces visual output, print produces text, and query combines probing with textual output. Its examples also show analyses using recursive resolvers or authoritative servers and examining a domain with its ancestry. Consult the repository’s README and linked command documentation for current installation instructions and exact syntax; dependency and release details can change.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Use DNSViz before and after DNS changes

The project identifies pre-deployment testing as a use case. You can run an analysis before changing a live configuration, retain command-line probe output if you need a local record, and run another analysis after the change to inspect the resulting DNS behavior. A later result is a new observation, not a guarantee that every resolver or client will see identical data at the same moment.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 2
Internet Speed & Buffering Test for Fire TV – WiFi Speed Test, Ping, DNS, Streaming Quality & Network Doctor
Internet Speed & Buffering Test for Fire TV – WiFi Speed Test, Ping, DNS, Streaming Quality & Network Doctor
- Check Fire TV internet speed; - Test response time, DNS, jitter, and HTTP loading; - See likely HD and 4K streaming readiness
$1.69
Bestseller No. 3
Fluke Networks DSX2-8000QI Cable Analyzer
Fluke Networks DSX2-8000QI Cable Analyzer
Unmatched speed for Cat 6A, 8, Class FA, I/II and all current standards; Taptive™ user interface simplifies set-up, and eliminates errors
$28,820.54

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.