Ask a public resolver, or any public address, for a record

Record type, e.g. A, MX, TXT, DS, HTTPS, or TYPE<n>

A board resolver id (cloudflare, google, quad9, opendns, adguard, ...), its address or host name (8.8.8.8, dns.google), "all" for cloudflare, google, quad9 and adguard side by side, or any public IP address. With "all", a row the requested transport cannot reach is asked over one it can (tcp53, dot, doh), and transportUsed names it; over udp53 such a row is not asked.

Up to 6 public addresses, comma separated, asked in place of resolver.

doh, dot and tcp53 are asked from the edge; udp53 from a probe, theoracle (Phoenix) unless from names a region

Set DO and read AD; dnssec=0 turns it off

Set CD (checking disabled)

EDNS Client Subnet, CIDR, e.g. 192.0.2.0/24

Clear RD, like dig +norec

Address family dialled over dot, tcp53 and udp53 (both: a row per family the resolver has an address in); over DoH the family is not chosen

Ask over Do53/UDP from the probe in this region (no other transport): north-america is theoracle (Phoenix), europe is thewizard (Amsterdam)

Also walk the CNAME chain from the name, hop by hop, to its addresses: each hop asked for CNAME at Cloudflare's DoH from the edge. The chain is the response's follow, beside results; the text form prints it after the dig. Nothing is walked for a refused name.