drill

Query A records

$ drill [example.com]

$ drill [example.com] [MX]

$ drill @[8.8.8.8] [example.com]

$ drill -T [example.com]

$ drill -D [example.com]

$ drill -t [example.com]

$ drill -x [8.8.8.8]

drill [options] name [@server] [type]

drill is a DNS lookup tool from the ldns library, designed as a modern alternative to dig. It performs DNS queries with particular emphasis on DNSSEC verification capabilities.
The tool provides detailed output about DNS responses including flags, sections, and timing. The trace option follows the delegation chain from root servers, showing how DNS resolution works.
drill's DNSSEC support includes signature validation and trust chain verification, making it valuable for debugging secure DNS configurations.

NAME

Domain name to query.

DNS server to query.

Record type: A, AAAA, MX, NS, TXT, etc.

Trace from root to answer.

Enable DNSSEC validation.

Use TCP instead of UDP.

Reverse DNS lookup.

Trust anchor file for DNSSEC.

Verbose output.

Less widely installed than dig. Some output format differences from dig. DNSSEC validation requires proper trust anchor configuration.

drill was developed as part of the ldns library by NLnet Labs, creators of Unbound DNS. It was designed as a dig replacement with better DNSSEC support and cleaner output.

dig(1), nslookup(1), dog(1), unbound(8)