What is DNS Propagation? The Internet's Caching Mechanism
DNS propagation is the delay between when you update a DNS record on your authoritative nameserver and when that change becomes visible to all DNS resolvers worldwide. During this period, different users may see different versions of your DNS records depending on which resolver they use and what that resolver has cached.
Propagation exists because DNS is a distributed, cached system. If every DNS query had to go to the authoritative nameserver, the internet would grind to a halt under the load. Caching makes DNS fast and scalable but creates update delays.
The Propagation Analogy
Imagine you change your phone number. You update your contact info in the master phonebook (your authoritative DNS). But:
- Your friend Alice looked up your number yesterday and wrote it on a sticky note (cached it). She won't check the master phonebook until her sticky note expires (TTL).
- Your friend Bob checks the master phonebook every time because he doesn't use sticky notes. He sees your new number immediately.
- Your friend Charlie uses a different phonebook service (a recursive resolver) that updates on its own schedule.
DNS propagation is the process of all these sticky notes (caches) expiring and being refreshed with the new information.
The MX Propagation Challenge: Why Email Is Especially Vulnerable
MX record propagation is uniquely problematic because email delivery is asynchronous and involves many independent senders.
Problem 1: Email Senders Are Not Centralized
Unlike web browsers, where a single user controls their DNS cache, email involves hundreds or thousands of sending mail servers. Each sender independently caches your MX records. Even after your update, some senders will continue using old MX records until their cache expires.
Problem 2: Email Queues and Retries
When an email fails delivery (e.g., old MX server rejects it), the sending server typically queues the message and retries for 24-72 hours. During this retry window, the sender may finally refresh DNS and discover your new MX record, eventually delivering the email. However, if you've cancelled your old provider, those queued emails will bounce permanently.
Problem 3: TTL Is Just a Suggestion
DNS resolvers are not required to honor TTL. Many ignore it entirely and use their own caching policies. Some ISPs cache DNS records for 24-48 hours regardless of TTL. This "minimum TTL" behavior protects their infrastructure from high query volumes but creates unpredictable propagation times.
Real-World Impact Example
You migrate from OldProvider to NewProvider:
- 90% of senders see new MX records within 1 hour.
- 9% see new records within 4-8 hours.
- 1% (especially corporate email systems with aggressive caching) may take 24-48 hours or longer.
Even with a successful migration, up to 1% of your email may be delayed or lost if you cancel OldProvider too quickly.
Realistic Propagation Timeline: What to Expect When
These timelines assume you've followed best practices (reduced TTL to 300 seconds at least 24 hours before the change). If you skipped TTL reduction, multiply all times by 2-8x.
Minutes 0-5: Immediate (Your Authoritative DNS)
Your DNS provider shows the new MX records instantly. Some internal queries and queries from resolvers with empty caches will see the change.
Minutes 5-30: Early Propagation
Major public resolvers (Google 8.8.8.8, Cloudflare 1.1.1.1, OpenDNS) refresh their caches based on TTL (now 300 seconds). Approximately 30-50% of queries now see new records.
Hours 1-4: Majority Propagation
Most ISP resolvers have refreshed. Approximately 80-90% of queries see new records.
Hours 4-24: Residual Propagation
Smaller ISPs, corporate DNS servers with custom caching, and resolvers that ignore TTL gradually update. 95-99% of queries see new records.
Days 1-3: Long-Tail Propagation
Some senders still have old MX cached. This is normal but increasingly rare. Email queuing systems may still be retrying deliveries using old records.
Days 3-7: Complete Convergence
Virtually all resolvers have updated. Only pathological cases (broken DNS servers, offline systems) remain.
How to Migrate MX Records Without Email Loss: The Zero-Downtime Strategy
Follow this exact process to change email providers without losing a single message.
Phase 1: Preparation (5+ Days Before Migration)
- Check current TTL: Use our MX Lookup Tool to see your MX record TTL.
- Reduce TTL to 300 seconds: Lower TTL on all MX records.
- Wait for full TTL expiration: Wait at LEAST the original TTL duration (e.g., if TTL was 86400 seconds (24 hours), wait 24 hours). During this wait, the lower TTL propagates.
- Verify TTL reduced globally: Use our tool from multiple geographic locations to confirm lower TTL is visible.
Phase 2: Dual Delivery Setup (During Migration)
Configure your domain to deliver email to both old and new providers simultaneously. Methods:
- Method A (If both providers support it): Configure your old provider to forward all email to your new provider.
- Method B (Using a forwarding service): Use a third-party email gateway that receives mail and forwards to both providers.
- Method C (Priority-based): Set old provider as higher priority (lower number) and new as lower priority (higher number). Email goes to old first; if old accepts, new isn't tried. This isn't true dual deliveryโemail only goes to one provider.
If dual delivery isn't possible, proceed to Phase 3 but understand you'll have a "split brain" period where some email goes to old and some to new.
Phase 3: Switch MX Records (Migration Day)
- Add new MX records: Add new provider's MX records with HIGHER priorities (e.g., priority 20).
- Keep old MX records: Leave old provider's records with LOWER priorities (e.g., priority 10).
- Wait 24-48 hours: During this period, most email still goes to old provider (since it has higher priority), but new provider is ready and receiving some traffic.
- Swap priorities: After 48 hours, change priorities so new provider has LOWER priority (e.g., priority 10) and old has HIGHER (e.g., priority 20). Email now flows to new provider primarily.
- Monitor: Check both providers' inboxes for 24-48 hours. If you see email only in old provider, some senders still have old MX cached. If you see email in both, the transition is working.
Phase 4: Remove Old Provider (After Confirmation)
- Wait minimum 72 hours after swapping priorities.
- Verify no new email arrives at old provider for 24 consecutive hours.
- Delete old MX records from DNS.
- Cancel old email provider (finally!).
What If You Already Lost Email?
If you switched MX records without TTL reduction and cancelled your old provider, you may have lost email. Recovery steps:
- Restore old provider's MX records immediately.
- If old provider still has your email data, check if queued emails were delivered during the outage window.
- Request senders to resend critical emails (unprofessional but necessary).
- Follow the safe migration process above from the beginning.
