October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Point a Domain Name at Your Server IP Address (A, AAAA, www, and DNS Troubleshooting)

A practical guide to pointing an apex domain and www at your server, with the right A/AAAA records, authoritative DNS checks, TTL expectations, verification steps, and server-side troubleshooting.
Length9 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To point a domain at a server, edit the domain’s authoritative DNS zone and create an A record for a public IPv4 address or an AAAA record for a public IPv6 address. Use @ (or your provider’s equivalent) for the bare domain, and usually create a CNAME from www to the bare domain. DNS changes can remain cached until the record’s TTL expires; if the name resolves but the site does not load, investigate the server, firewall, virtual-host, redirect, and TLS settings separately.

What “pointing a domain” actually changes

A domain name is a human-readable label. DNS translates that label into the network address where a resource is hosted. Pointing example.com at a server means publishing DNS records that tell resolvers which IP address to return for that name.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

DNS does not deploy files, start a web server, open firewall ports, configure redirects, or issue an HTTPS certificate. Those are server-side tasks that must be completed after the name resolves correctly.

The three services involved

  • Registrar: the company where the domain registration is maintained.
  • Authoritative DNS host: the service whose nameservers publish the zone’s final records. It may be the registrar or a separate provider.
  • Web host or server: the machine that owns the public IP and serves the site.

These services can be separate. Changing a record in a registrar’s general dashboard will have no public effect if the domain delegates DNS to different nameservers.

#1 Best Overall
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5) | Dual Band Wireless Internet, Gigabit, Easy Mesh, Works with Alexa - A Certified for Humans Device
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

Choose the correct DNS record

Record Use it for Value format Example
A IPv4 address Dotted-decimal public address 203.0.113.10
AAAA IPv6 address Colon-separated IPv6 address IPv6 address supplied by your host
CNAME An alias to another hostname, commonly www Hostname, not an IP address example.com.

Google Cloud’s DNS guidance specifies an A record for an IPv4 address and an AAAA record for IPv6. Do not put an IPv6 address in an A record, and do not put an IP address in a CNAME value.

Use a public address

Enter the public IPv4 or IPv6 address supplied by your hosting provider. A private LAN address such as 192.168.x.x, 10.x.x.x, or 172.16.x.x is not reachable from the public Internet. A private address is appropriate only for a deliberately internal DNS zone.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Understand the apex name

The bare domain, such as example.com, is the zone apex. Control panels commonly represent it as @, while others show a blank host field, the word “root,” or the full domain. The label is provider-specific; the intent is the same.

A typical apex record is:

Host/name Type Value TTL
@ or the bare domain A 203.0.113.10 Provider default, or a deliberately short value during migration

Do not add several different A records by accident. Multiple addresses intentionally create round-robin or multi-address behavior, but an old record left beside the new one can send visitors to different servers.

Find the authoritative DNS provider before editing

Nameserver (NS) delegation tells the Internet which servers answer for your domain. Those authoritative servers store A, AAAA, CNAME, MX, and other records. The registrar and DNS host may have different logins and different control panels.

Rank #2
TP-Link AC1200 Gigabit Dual Band WiFi Router (Archer A6) | MU-MIMO Wireless Internet Router, 4 x Antennas, OneMesh and AP Mode, Long Range Coverage
  • Dual band router upgrades to 1200 Mbps high speed internet (300mbps for 2.4GHz plus 900Mbps for 5GHz), reducing buffering and ideal for 4K stream
  • Full Gigabit Ports - Gigabit Router with 4 Gigabit LAN ports, ideal for any internet plan and allow you to directly connect your wired devices
  • Boosted Coverage - Four external antennas equipped with Beamforming technology extend and concentrate the Wi-Fi signals
  • MU-MIMO technology - (5GHz band) allows high speeds for multiple devices simultaneously
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  1. Open the registrar’s domain-management page and locate the domain’s nameserver delegation.
  2. Write down the nameserver hostnames currently listed.
  3. Identify the DNS provider operating those nameservers.
  4. Sign in to that provider and open the authoritative zone for the domain.
  5. Edit records there, rather than in an unconnected registrar dashboard.

If you are unsure, perform an NS lookup for the domain and compare the returned nameservers with the service where you plan to make the change. If the public NS answer does not match the provider’s nameservers, the provider is not authoritative for the current delegation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Point the bare domain at an IPv4 server

  1. Confirm the server has the intended public IPv4 address and is running.
  2. In the authoritative DNS zone, choose Add record or edit the existing apex record.
  3. Set the type to A.
  4. Set the host/name to @, blank, root, or the full domain according to that provider’s label.
  5. Enter the exact public IPv4 address, such as 203.0.113.10.
  6. Leave the provider’s normal TTL in place unless you have a reason to shorten it for a migration.
  7. Save the record.
  8. Remove an obsolete A record if it would conflict with the new destination.

The record now tells resolvers where to find the apex name. It does not tell the server which website to return; the web server still needs a virtual-host entry for the domain.

Add IPv6 with an AAAA record

If the server has a public IPv6 address, create an AAAA record with the same hostname logic used for the A record. For the apex, that normally means @ plus the IPv6 address supplied by the host.

Keep the A record if the site must support IPv4 as well as IPv6. Visitors with IPv6 connectivity may use the AAAA answer, while others use the A answer. Check that the IPv6 address is assigned to the correct interface and that the firewall permits the web traffic before publishing it.

An incorrect AAAA record can make a site appear broken for IPv6-capable visitors even when the A record is perfect. When troubleshooting, inspect both record types rather than checking only IPv4.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
TP-Link AC1200 WiFi Router Dual Band Wireless Internet Router (Archer A54) | 4 x 10/100 Mbps Fast Ethernet Ports, EasyMesh Compatible, Support Guest WiFi, Access Point Mode, IPv6 & Parental Controls
  • Dual-band Wi-Fi with 5 GHz speeds up to 867 Mbps and 2.4 GHz speeds up to 300 Mbps, delivering 1200 Mbps of total bandwidth¹. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance to devices, and obstacles such as walls.
  • Covers up to 1,000 sq. ft. with four external antennas for stable wireless connections and optimal coverage.
  • Supports IGMP Proxy/Snooping, Bridge and Tag VLAN to optimize IPTV streaming
  • Access Point Mode - Supports AP Mode to transform your wired connection into wireless network, an ideal wireless router for home
  • Advanced Security with WPA3 - The latest Wi-Fi security protocol, WPA3, brings new capabilities to improve cybersecurity in personal networks

Configure www correctly

www.example.com is a separate hostname from example.com; it needs its own DNS record. The common arrangement is a CNAME from www to the apex:

Host/name Type Target
www CNAME example.com.

A CNAME contains a hostname, not an IP address. The trailing dot is accepted by many DNS interfaces to show that the target is an absolute name; some panels add or remove it automatically.

  1. Decide whether the canonical public URL will be the apex or www.
  2. Create the www CNAME to the chosen canonical hostname when the hosting platform supports that arrangement.
  3. Configure the web server to answer for both hostnames or redirect the non-canonical one.
  4. Make sure the HTTPS certificate covers every hostname visitors may use.

Some hosting platforms require an A or AAAA record for www instead of a CNAME. Follow that platform’s required target. Do not create a CNAME and an A, AAAA, or another CNAME for the same name; DNS does not permit those combinations to coexist reliably.

Set TTL with migration timing in mind

TTL is the cache lifetime attached to a DNS record. Cloudflare describes it as the field that controls how long each record is cached and, consequently, how long an update takes to reach end users. A resolver can continue returning the old address until the old TTL expires.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cloudflare documents 300 seconds (five minutes) as the default TTL for proxied records in its service in 2026. That figure is provider-specific, not a universal propagation guarantee. Other DNS providers and record modes can use different defaults.

Rank #4
Sale
TP-Link Deco X55 AX3000 WiFi 6 Mesh System, Deco X55(3-Pack) | Covers up to 6500 Sq.Ft. , Replaces Wireless Router and Extender, 3 Gigabit ports per unit, supports Ethernet Backhaul
  • Wi-Fi 6 Mesh Wi-Fi - Next-gen Wi-Fi 6 AX3000 whole home mesh system to eliminate weak Wi-Fi for good(2×2/HE160 2402 Mbps plus 2×2 574 Mbps)
  • Whole Home WiFi Coverage - Covers up to 6500 square feet with seamless high-performance Wi-Fi 6 and eliminate dead zones and buffering. Better than traditional WiFi booster and Range Extenders
  • Connect More Devices - Deco X55(3-pack) is strong enough to connect up to 150 devices with strong and reliable Wi-Fi
  • Our Cybersecurity Commitment - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement
  • More Gigabit Ports - Each Deco X55 has 3 Gigabit Ethernet ports(6 in total for a 2-pack) and supports Wired Ethernet Backhaul for better speeds. Any of them can work as a Wi-Fi Router

Before a planned move

  1. Lower the existing record’s TTL ahead of the migration, if your provider permits it.
  2. Wait long enough for caches holding the previous, longer TTL to expire.
  3. Change the address during a period when you can monitor both the old and new servers.
  4. Restore a longer TTL after the new destination is stable.

If you did not lower the TTL first, lowering it after the change cannot erase caches that already stored the old value. Local operating-system caches, home routers, enterprise resolvers, and public resolvers can all make the observed delay differ by location.

Verify the change from multiple locations

Verification should test DNS and the web service separately.

  1. Check that the authoritative zone contains the intended A record, AAAA record, and www CNAME.
  2. Query the A and AAAA records through more than one public resolver and compare the answers.
  3. Query the www name and confirm that its CNAME target is the one you chose.
  4. Repeat the checks from a different network or geographic location to expose cached results.
  5. Open the apex and www addresses in a browser and confirm that the expected site appears.
  6. Test both HTTP and HTTPS, including the final redirect destination.

An answer that still shows the old IP from one resolver does not necessarily mean the edit failed; it may be serving a cached response. An answer that consistently shows the new IP from authoritative and public resolvers indicates that the DNS portion is working.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

When DNS resolves but the website fails

A successful lookup proves only that a hostname maps to an address. Use this troubleshooting order when the browser reports a connection, routing, or certificate error.

The server is unreachable

  • Confirm the machine is powered on and has the expected public address.
  • Check firewall and security-group rules for TCP port 80 (HTTP) and TCP port 443 (HTTPS).
  • Verify that the web service is listening on those ports and on the correct IPv4 and IPv6 interfaces.
  • Check whether a provider-level firewall, load balancer, or router is blocking the connection.

The wrong site appears

  • Confirm the request’s Host header is configured as a virtual host or server block on the web server.
  • Check that both the apex and www names are included in the site configuration.
  • Look for a leftover A or AAAA record that sends some visitors to another machine.
  • Inspect application-level redirects and cached content after DNS is known to be correct.

HTTPS reports a certificate error

  • Make sure the certificate includes the exact hostname being opened.
  • Install the certificate and its intermediate chain on the server or TLS terminator.
  • Check that the server selects the correct certificate for both the apex and www through virtual-host or SNI configuration.
  • Do not treat a valid DNS answer as proof that TLS is configured.

Only some users see the old site

Compare resolver answers and their remaining TTLs. If authoritative data is correct but one network still returns the previous address, wait for that cache to expire rather than repeatedly changing the record. Repeated edits can make diagnosis harder and may extend the transition if different caches store each new value.

Best Value
Sale
TP-Link AXE5400 Tri-Band WiFi 6E Router, 2025 PCMag Editors' Choice | 2.5Gbps WAN Port for Gaming & Streaming, 6GHz Band, 160MHz, OneMesh, Dual-Core CPU, VPN & WPA3 (Archer AXE75)
  • Tri-Band WiFi 6E Router - Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time(6 GHz: 2402 Mbps;5 GHz: 2402 Mbps;2.4 GHz: 574 Mbps)
  • WiFi 6E Unleashed – The 6 GHz band brings more bandwidth, faster speeds, and near-zero latency; Enables more responsive gaming and video chatting
  • Connect More Devices—True Tri-Band and OFDMA technology increase capacity by 4 times to enable simultaneous transmission to more devices
  • Unique Design, More RAM, Better Processing - A unique housing design provides optimal heat dissipation, combined with a 1.0 GHz dual-core CPU and 512 MB High-Speed Memory, the AXE75 is designed for long-term reliability and performance.
  • EasyMesh-compatible - Extend network range even more by adding EasyMesh-compatible routers, extenders, or wireless powerline adapters for a seamless, whole-home connection. Eliminate dead zones, drops, and lag as you move across your home.

Common mistakes and their fixes

Editing the wrong dashboard

Symptom: the control panel shows the new address, but public lookups never change. Fix: check NS delegation and edit the zone on the provider named by those authoritative nameservers.

Putting an IP in a CNAME

Symptom: the record is rejected or www does not resolve. Fix: use an A record for IPv4, an AAAA record for IPv6, or set the CNAME value to a hostname.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Using a private address

Symptom: the domain resolves, but public visitors cannot connect. Fix: replace the private LAN address with the server’s routable public address, unless the zone is intentionally internal.

Leaving conflicting records

Symptom: different queries return different servers or the site alternates between working and failing. Fix: remove stale A, AAAA, or CNAME records and keep only the records required for the intended design.

Forgetting the second hostname

Symptom: the bare domain works while www fails, or the reverse. Fix: publish a separate www record and configure the web server and certificate for both names.

Assuming DNS configures the application

Symptom: DNS tools show the correct IP, but the browser displays a default page, timeout, redirect loop, or certificate warning. Fix: inspect ports, firewall rules, virtual-host mappings, redirects, application health, and TLS independently.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choosing a DNS service for a domain-to-server setup

Keep registrar, DNS hosting, and web hosting as separate decisions even when one company offers all three. When comparing authoritative DNS services, evaluate:

  • Ability to create apex A and AAAA records and a www CNAME.
  • Clear nameserver delegation and an interface that distinguishes authoritative records from forwarding or marketing features.
  • TTL flexibility for migrations.
  • DNSSEC and other security controls when your domain and applications support them.
  • API access for repeatable changes and infrastructure automation.
  • Monitoring, change history, and operational reliability.
  • Whether the service proxies traffic, which can change the visible destination, TLS termination, caching, and firewall behavior.

A DNS provider that proxies traffic may not expose the origin server’s IP to visitors. In that design, confirm which records are authoritative and which settings control the proxy before troubleshooting the origin.

A safe end-to-end workflow

  1. Inventory the destination: record the server’s public IPv4 and, if used, IPv6 addresses; confirm the service is running.
  2. Identify authority: inspect NS delegation and sign in to the authoritative DNS provider.
  3. Plan names: choose the canonical apex or www URL and list every hostname the server must accept.
  4. Publish records: create the apex A and/or AAAA record, then add the appropriate www CNAME or address record.
  5. Prepare the server: open ports 80 and 443, configure virtual hosts, redirects, and certificates before directing production traffic.
  6. Verify DNS: query A, AAAA, and CNAME answers through multiple resolvers.
  7. Verify HTTP: test both hostnames, redirect behavior, and HTTPS from more than one network.
  8. Monitor the transition: watch logs on the old and new destinations until caches using the previous TTL have expired.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.