DNS check
dns — DNS
Records resolve, no drift from the expected answers, SOA-serial and answer consistency across resolvers, TTL floor.
checkfleet check dns --config checkfleet.yml
DNS resolution health, using a small in-tree DNS client (no third-party dependency) so it can query specific resolvers and read TTLs and SOA serials.
- Resolution: a name that no resolver answers is
ERROR; a name that resolves to no record of the requested type isBAD. - Drift: with
expect, an answer set different from the expected values isBAD(forSOAthe serial is compared). - Consistency across resolvers: when resolvers return different answers —
including divergent SOA serials (a propagation lag) — that’s
WARN; so is a resolver that fails to answer while others succeed. - TTL: with
min_ttl_seconds, an answer TTL below the threshold isWARN.
Supported record types: A, AAAA, CNAME, NS, TXT, SOA. Resolvers
default to the system /etc/resolv.conf when none are configured. Findings are
labelled name/TYPE, name/TYPE [consistency], name/TYPE [ttl].
See Configuration → checks.dns.
See the full module reference for every check, or configuration for the config keys.