Skip to content

DNS TTL in Runet 2026: Benchmark

Key idea:

Enterno.io measured DNS TTL for 5000 .ru domains (March 2026). A-record median = 3600s (1 hour), but the distribution is bimodal: CDN users keep 300s (fast failover), legacy sites — 86400s (1 day). MX TTL median 14400s (4 h), NS TTL 86400s (1 d, per RFC). 8% of domains have TTL > 2 days — risky on migrations.

Below: key findings, platform breakdown, implications, methodology, FAQ.

Key Findings

MetricPass-rate / ValueMedianp75
A-record TTL (median)3600s360014400
A-record TTL — Cloudflare/CDN300s
A-record TTL — REG.RU default14400s
MX TTLmedian 14400s1440043200
NS TTLmedian 86400s86400172800
TXT TTL (SPF/DKIM)median 3600s360014400
TTL > 2 days (risky)8%
TTL < 60s (overkill)2.3%

Breakdown by Platform

PlatformSharePass / Detailavg
REG.RU DNS28% marketA: median 14400s
Cloudflare DNS14%A: median 300s
Yandex Cloud DNS7%A: median 600s
Timeweb DNS11%A: median 14400s
Beget DNS9%A: median 3600s
Custom (self-hosted BIND/PowerDNS)4%A: median 7200s

Why It Matters

  • Before migrating to a new IP — lower TTL to 300s 2-3 days ahead (so resolver caches refresh)
  • After migration — return TTL to 3600-14400s (fewer DNS queries → cheaper and faster)
  • TTL for stateless APIs: 60-300s (failover beats performance)
  • TTL for NS records: high (86400s) — they rarely change, and cache protects resolvers from spam
  • TTL < 60 seconds — overkill and hammers Google/Cloudflare resolver infrastructure

Methodology

Top-5000 .ru domains by SimilarWeb. dig +noall +answer example.com A MX NS TXT through 8.8.8.8 and 1.1.1.1. TTL fetched on the authoritative DNS (bypass cache). Platform detected by SOA RNAME.

A / AAAAIPv4 and IPv6 host addresses
MX RecordsDomain mail servers
TXT / SPFVerification & anti-spoofing
NS / SOAName servers & zone authority

Why teams trust us

12
DNS record types
SPF+DKIM
email protection
<1s
DNS response
3
check regions

How it works

1

Enter domain

2

Select record type

3

Get DNS response

What are DNS Records?

DNS (Domain Name System) translates domain names into IP addresses. DNS records are instructions that define where to route traffic, email, and how to verify domainownership.

Complete Lookup

Query all record types — A, AAAA, MX, NS, TXT, CNAME, SOA — in a single request.

Instant Results

Direct queries to authoritative servers. Results in milliseconds, no caching.

Security Checks

SPF, DKIM, and DMARC analysis to evaluate email protection against spoofing and phishing.

Export & History

Save check results. Compare DNS records before and after registrar changes.

Who uses this

DevOps

DNS check after deploy

Email marketers

SPF/DKIM/DMARC audit

SEO

DNS config audit

Sysadmins

DNS zone control

Common Mistakes

Missing SPF recordWithout SPF, emails may land in spam. Add a v=spf1 TXT record.
Single NS serverIf the only NS fails, the domain becomes unreachable. Use at least 2 NS servers.
CNAME conflicting with other recordsCNAME cannot coexist with MX or TXT on the same name — this violates RFC.
TTL set too highWith 86400s TTL, DNS changes take a full day. Lower TTL to 300 before migrations.
Missing PTR recordMail servers check PTR. Without it, emails may be rejected.

Best Practices

Set up SPF + DKIM + DMARCThe trio of records that protects your email from spoofing and improves deliverability.
Use 2+ NS serversDistribute NS servers across different networks for redundancy.
Lower TTL before migrationSet TTL to 300 at least 24-48 hours before an IP change for fast propagation.
Verify DNS after changesAfter updating records, confirm changes propagated correctly and no errors remain.
Add a CAA recordCAA restricts which Certificate Authorities can issue SSL certificates for your domain.

Get more with a free account

DNS check history, API keys and DNS change monitoring.

Sign up free

Learn more

Frequently Asked Questions

What TTL should I set for a new site?

3600s (1 h) — standard for 90% of cases. Balances migration speed and DNS load.

What to do 2-3 days before migrating the server?

Lower A-record TTL to 300s. Wait for the old TTL (for resolvers to refresh). Migrate. Restore TTL to 3600s.

Does Cloudflare DNS always use TTL=1?

No. Default TTL is 300s; "Auto" gives TTL=1 only with proxy:on — Cloudflare overrides for edge performance.

How do I check my site's TTL?

<a href="/en/dns">Enterno DNS</a> → enter domain → per-record TTL. Or: <code>dig example.com</code> → TTL shown in seconds.