Seventeen Seconds Left
The authoritative zone publishes the CNAME with a TTL of 300 and the target A record with a TTL of 60. Querying a large recursive resolver right now returns:
$ dig +noall +answer app.example.com
app.example.com. 42 IN CNAME app-lb.example.net.
app-lb.example.net. 17 IN A 203.0.113.9
You change the A record at the authority to a new address. For how much longer can this resolver still hand out 203.0.113.9?
Sign in to answer questions and track your progress
Sign In