RespireCloud
Request a demo

DNS

In preview

Authoritative DNS on PowerDNS. The panel keeps the zone you want; the server is sent the complete zone and only record sets that changed are touched.

Built and lab-tested

  • A zone is created when a domain is added, from your template or a sensible default (apex, www, mail, MX and SPF).
  • 17 record types plus SOA: A, AAAA, CNAME, MX, TXT, SRV, CAA, NS, PTR, TLSA, SSHFP, DS, HTTPS, SVCB, NAPTR, URI and LOC.
  • Field-level validation: CNAME at the apex, CNAME beside other data, duplicates, out-of-zone names and mismatched TTLs are refused with the reason.
  • DNSSEC with one action (ECDSA P-256); the DS record is returned for your registrar.
  • Zone file import and export, 100 snapshots of history per zone with restore, templates, vanity nameservers with glue, wildcards and international names.
  • Every change can run as a dry run with per-record diffs. A zone removed behind the panel's back is restored on reconcile.
  • Secondary name servers: a transfer key per pair, kept in the vault and shown once. In the lab a change on the primary reached the secondary in 1.4 seconds, and a transfer with no key or a wrong key was refused.
  • A transfer needs the key and a listed address: transfers are served by a separate process on port 5300 that accepts only the key, and the firewall module lets only the listed addresses reach that port. Without a panel-managed firewall on the node only the key is enforced.
  • This server can be the secondary of an outside primary (a wrong key shows as refused, a silent primary as down), and a secondary can be promoted when the primary is gone; the old primary is fenced when it returns. All lab-proven.

Not there yet

  • Screens for promotion, an outside primary and a changed address: today these are actions (API and command line), and the Secondaries tab does not show the refused state. Outside secondaries of a promoted zone must be pointed at the new port by hand.
  • DS push to registrars, propagation checks and ALIAS records.

Every action in this area is in the panel, one keystroke away in the command palette (Ctrl K), on the command line and in the API, and most changes can be previewed as a plan first. Built and tested in our lab; RespireCloud is not released yet.

A DNS zone marked Healthy with its DNSSEC switch and nameservers, a row to add a record, and a table of A, MX, NS, TXT and CNAME records. A DNS zone marked Healthy with its DNSSEC switch and nameservers, a row to add a record, and a table of A, MX, NS, TXT and CNAME records.

Modules in this area