October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk11 min

How to Point a Domain Name at Your Server IP Address

Create the right DNS records, edit them at the authoritative nameserver, configure www correctly and verify that your server, firewall and TLS setup are ready.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To point a domain at a server, edit the domain’s authoritative DNS zone and create an A record for an IPv4 address or an AAAA record for an IPv6 address. Most sites use an apex record for example.com and a www CNAME that targets the apex. DNS only directs traffic; your server, firewall, web-server configuration and TLS certificate must still be ready to answer requests.

What “pointing a domain” actually changes

When someone enters a domain name, a DNS resolver looks up records for that name and returns an address. The browser then connects to the returned server. Changing DNS does not move files, create a website, open a firewall port or install HTTPS. It changes the public answer to the question “Which address should handle this hostname?”

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The records that matter for an IP address are:

Record Maps Use it when
A A hostname to an IPv4 address, such as 203.0.113.10 Your server has a public IPv4 address
AAAA A hostname to an IPv6 address Your server has a public IPv6 address and is configured to accept IPv6 traffic
CNAME A hostname to another hostname, never directly to an IP address You want www (or another subdomain) to follow the apex or a provider hostname

For a typical IPv4 site, the apex record looks like this:

Name or host Type Value TTL
@, blank, root, or the full domain A 203.0.113.10 Provider default, or a deliberately short value during a migration

The address above is an example from the documentation address range. Replace it with the public address supplied by your hosting provider. Do not use a private LAN address such as 192.168.x.x, 10.x.x.x or 172.16.x.x–172.31.x.x for a public website unless the domain is intentionally restricted to an internal network.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Find the authoritative DNS service first

The company that sold the domain is not necessarily the company that hosts its DNS. Nameserver (NS) delegation identifies the authoritative service: the nameservers listed for the domain store and publish the A, AAAA, CNAME, MX and other records. Editing a different dashboard has no effect on the public result.

Check delegation in the registrar account

  1. Open the domain’s management page at the registrar.
  2. Find Nameservers, DNS servers or Delegation.
  3. Note the nameserver hostnames currently assigned to the domain.
  4. Sign in to the DNS provider represented by those nameservers and open the zone for the domain.

Some registrars provide an integrated DNS editor when their own nameservers are active. Others show only registration settings and direct you to an external DNS host. Treat the nameserver list as the source of truth.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Confirm with an NS lookup

From a terminal, query the domain’s NS records with a tool such as dig NS example.com or nslookup -type=NS example.com. The returned nameservers should match the service where you intend to make the change. If they do not, either edit the currently authoritative zone or deliberately update the delegation first; changing both at once makes troubleshooting harder.

Prepare the server before changing DNS

Record the exact public address and decide which hostname will be canonical. A provider may give you one IPv4 address, one IPv6 address, or both. Verify that the address is assigned to the running server and that the server is reachable from the Internet.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
  • Install and start the web server or application that should answer the domain.
  • Allow inbound TCP traffic on port 80 for HTTP and port 443 for HTTPS, subject to your hosting provider’s firewall and your operating system firewall.
  • Configure a virtual host, server block or equivalent for the apex name and www if both will be used.
  • Choose whether requests should redirect from the apex to www, or from www to the apex. Use one canonical destination rather than serving two independent versions.
  • Obtain a TLS certificate that covers every hostname visitors will use. A certificate for only the apex does not automatically cover www.

DNS can be changed while the server is being prepared, but visitors may reach the new address as soon as caches expire. Having the web server ready first avoids an interval of connection errors or a default hosting page.

Point the apex domain to an IPv4 server

The following procedure applies to most DNS control panels. Labels differ, but the record fields have the same meaning.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Open the authoritative DNS zone for your domain.
  2. Choose Add record or Create record.
  3. Select A as the type.
  4. Enter @, the bare domain, blank, or the panel’s equivalent for the host/name field. Do not enter www here unless you are intentionally creating a separate www A record.
  5. Enter the server’s public IPv4 address in the value field. Use dotted-decimal notation, for example 203.0.113.10; do not include http://, a port number or a path.
  6. Leave TTL at the provider default unless you have a migration reason to choose a shorter value. Save the record.
  7. Remove or edit an old apex A record if it points to a different service. Multiple A records are valid only when you intentionally want multiple addresses and have planned for round-robin behavior.

Some DNS interfaces automatically append the domain name to a relative host. If you type the full domain into a field that expects only a label, the panel may create a duplicated name such as example.com.example.com. Follow the field’s placeholder and preview before saving.

Add www without creating a broken record

A common arrangement is an apex A record plus a www CNAME:

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Name Type Target Result
@ A 203.0.113.10 example.com resolves to the IPv4 address
www CNAME example.com. or the panel’s apex selector www.example.com follows the apex record
  1. Create a new record with type CNAME.
  2. Set the name/host to www.
  3. Set the target or canonical name to the apex domain. A trailing dot is accepted by some providers; others add it automatically.
  4. Save it and remove any existing www A, AAAA or conflicting CNAME record.
  5. Configure the web server and certificate for both names, then redirect the non-canonical hostname to the canonical one.

A CNAME contains a hostname, not an IP address. Entering an address in a CNAME field is invalid. Conversely, use an A or AAAA record when the platform specifically requires www to contain an address rather than an alias. A hostname cannot have a CNAME alongside other records of the same name, although the apex can have the records required by your DNS provider’s special features.

Use AAAA for IPv6—and understand dual-stack behavior

An IPv6 address requires an AAAA record. If your server deliberately accepts both protocols, publish an A record for IPv4 and an AAAA record for IPv6 at the same hostname. Resolvers may return both, and clients choose a reachable path. Do not publish an AAAA record merely because your hosting panel displays an IPv6 address: the server, firewall, routing and web-server listener must all be configured for IPv6.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check that an IPv6 address is globally routable, not a link-local or private address. Test from an external network before relying on it. If IPv6 is misconfigured, some visitors may experience slow fallback or connection failures even though IPv4 works; remove the AAAA record until IPv6 is correctly supported.

Prevent conflicts and accidental outages

  • Old A or AAAA records: An obsolete address can send users to the previous server. Update or delete it after confirming that no service still depends on it.
  • Duplicate records: Several addresses cause resolvers to distribute answers. Keep them only when every address serves the same site and you accept that distribution.
  • CNAME at the same name: A name with a CNAME cannot also have its own A, AAAA, MX or similar records under standard DNS rules.
  • Proxy mode: Some DNS providers offer a traffic proxy in front of an A or AAAA record. The public lookup may return proxy addresses rather than your server. This can affect TLS mode, client IP logging, firewall rules and troubleshooting.
  • Mail records: Do not delete MX, SPF, DKIM or DMARC records while changing website DNS. Website records and mail records share the same zone.
  • Nameserver changes: Replacing nameservers moves the entire zone. Recreate all required records, especially mail and verification records, before changing delegation.

TTL, caching and why the old site can persist

TTL is the cache lifetime attached to a DNS record. Cloudflare’s DNS documentation describes it as the field that controls how long each record is cached and, consequently, how long updates take to reach end users. Its documented default for proxied records is 300 seconds (five minutes), but that figure is provider-specific, not a universal propagation guarantee.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Resolvers may have cached the previous answer for the old record’s full TTL. Browsers, operating systems, home routers and corporate DNS services can add their own caching behavior. A correct change may therefore appear at one location while another still returns the old address.

During a planned migration, lower the TTL before changing the address, wait for the previous longer TTL to age out, make the switch, then raise the TTL after the results are stable. Lowering TTL after the change cannot erase answers that were cached under the earlier value.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Verify the change from several locations

Verification should distinguish DNS problems from server problems.

  1. Query the authoritative nameserver directly, for example dig @ns1.example-dns.com example.com A +short, replacing the nameserver with one actually delegated to your domain. This checks whether the zone contains the intended value.
  2. Query a public recursive resolver, such as dig @1.1.1.1 example.com A +short or dig @8.8.8.8 example.com A +short. Different resolvers may update at different times.
  3. Check IPv6 separately with dig example.com AAAA +short.
  4. Check www with dig www.example.com CNAME +short, then query its A/AAAA result if the provider synthesizes or follows the alias.
  5. Repeat from a second network or use a reputable multi-location DNS lookup service. Compare answers rather than relying on one computer’s cache.
  6. Open the apex and www in a private browser window. Confirm the address bar, redirect destination, page content and certificate name.

If a local machine shows an old answer after public resolvers have updated, flush its DNS cache or temporarily test with another network. Do not repeatedly edit the record to compensate for a local cache; each edit can extend confusion.

When DNS is correct but the site does not load

A successful A or AAAA lookup proves only that the name resolves. Work through the connection layers in order:

  1. Address ownership: Confirm the returned address belongs to the intended server and has not changed after a restart or provider migration.
  2. Routing and firewall: Check the hosting provider’s network firewall, cloud security group and operating system firewall. Permit TCP 80 and 443 as required.
  3. Listening services: Verify that the web server is listening on the public interface, not only on 127.0.0.1 or an internal address.
  4. Virtual-host matching: Ensure the server configuration includes the exact Host names example.com and www.example.com. Otherwise a default site may appear even though DNS is correct.
  5. Redirects: Inspect HTTP-to-HTTPS and apex-to-www redirects for loops, wrong ports or references to the old domain.
  6. TLS: The certificate must include the hostname in the browser’s address bar. A DNS change does not issue or renew a certificate.
  7. Application behavior: Check application logs, reverse-proxy configuration, environment variables and any host-allowlist setting that rejects the new domain.

These checks also explain why changing DNS cannot repair a server that is stopped, blocked or configured for another hostname.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choosing a DNS provider for this job

You can keep registration, DNS hosting and web hosting with one company or split them among specialists. They are separate functions: the registrar controls ownership and delegation, the authoritative DNS provider publishes records, and the web host runs the server.

Capability Why it matters Questions to ask
Authoritative control Determines whether your edits are the records the Internet sees Which nameservers are delegated, and can you export the zone?
Apex A/AAAA support Required to map the bare domain directly to your server Can the apex use both IPv4 and IPv6?
www CNAME support Lets the alias follow the apex or a platform hostname Does the interface accept the target with or without a trailing dot?
TTL flexibility Useful for migrations and controlled caching What minimum and maximum TTLs are allowed?
DNSSEC and security controls Helps protect DNS answers from tampering when correctly deployed Does the provider support DNSSEC signing and key-rollover guidance?
API and audit features Enables repeatable changes and a record of who changed what Are API tokens scoped, logged and revocable?
Monitoring and reliability Detects failed lookups or unexpected changes Are health checks, notifications and secondary DNS available?
Traffic proxying Can add caching or protection but changes the visible destination and connection path Can proxying be disabled per record, and how are origin IP and TLS handled?

Whatever arrangement you choose, document the delegated nameservers, zone records, server address, canonical hostname and certificate renewal method. That information prevents a future administrator from editing the wrong system.

Common migration patterns

Moving a site to a new IPv4 server

Lower the existing record’s TTL ahead of the move, prepare the new server and certificate, then replace the apex A value. Keep the old server available until queries and application logs show that normal traffic has shifted. Update www only if it does not already follow the apex.

Adding IPv6 to an existing IPv4 site

Confirm complete IPv6 connectivity first, then add an AAAA record while retaining the A record. Monitor both paths. If IPv6 clients fail, remove or correct the AAAA record rather than assuming all users will fall back cleanly.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Changing DNS providers

Copy every needed record—website, mail, verification, delegated subdomains and security records—to the new provider. Verify the new zone before changing nameservers. After delegation updates and caches expire, query the new authoritative servers and confirm that mail and web services still resolve.

Security and operational safeguards

  • Enable multi-factor authentication on the registrar and DNS accounts.
  • Use separate, least-privilege API tokens for automation; never place a full-account password in deployment scripts.
  • Turn on change notifications or maintain an audit log.
  • Protect the server’s origin address if a reverse proxy is intentionally in use, but understand that DNS alone does not hide an address that is published in other records or historical data.
  • Keep DNSSEC signing keys and registrar DS records coordinated. An incorrect DNSSEC change can make a domain appear completely unreachable even when A and AAAA values are correct.

A concise final checklist

  1. Identify the authoritative nameservers.
  2. Confirm the server’s public IPv4 and, if applicable, IPv6 addresses.
  3. Create or update the apex A and/or AAAA record.
  4. Create www as a CNAME to the apex when that fits your hosting setup.
  5. Remove stale or conflicting records without disturbing mail records.
  6. Confirm firewall ports, virtual hosts, redirects and TLS coverage.
  7. Query authoritative and public resolvers for A, AAAA and CNAME results.
  8. Allow cached answers to expire and test from more than one network.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.