DNS: registrars, edge caches, and the two audiences problem

How public DNS, registrar APIs, and edge networks interact—and why your LAN and the internet both deserve explicit answers.

Every hostname has at least two audiences: the public internet and your internal network. Registrar DNS (and APIs like Cloudflare or Porkbun) answers the world; internal resolvers answer your team.

When APIs earn their keep

Scriptable DNS updates are how certificates, failover tests, and new services stop being manual theater. The trick is to treat keys like production secrets and to log what changed.

Cloudflare’s learning center at cloudflare.com/learning/dns is a solid primer on TTLs, record types, and caching behavior that still trips people up.

LAN honesty

If internal clients resolve a name to the wrong place, every other layer will look broken. Fix DNS first; save the afternoon.