Authoritative DNS on anycast nameservers, with DNSSEC.
Host your domain’s zones on three anycast nameservers, announced from every region. Records follow your servers, balancers and buckets through the API and Terraform.
Included at no cost
Features
Every record type a domain needs.
Anycast nameservers
Three nameserver addresses, each announced from every region, so each query is answered in a region near the resolver.
DNSSEC
Turn on signing, and we sign the zone, rotate its keys and give you the DS record for your registrar.
All common records
A, AAAA, CNAME, MX, TXT, SRV, CAA and NS records, ALIAS at the apex, and TTLs from 60 seconds.
Changes in 5 seconds
Every record is in the API,
lc dnsand Terraform. A change reaches all three nameservers within 5 seconds.Certificates over DNS-01
Answer ACME DNS-01 challenges through the API, for wildcard certificates from Let’s Encrypt and other authorities.
Import or run as secondary
Import a BIND zone file, or serve as a secondary to your own primary, over AXFR and IXFR with TSIG.
Code
Records from the command line.
lc dns adds and changes records, and imports a whole zone file at once.
- Zone imports from a BIND file.
- Records that point at servers and balancers by name.
- TTLs from 60 seconds.
$ lc dns zone create example.com --import example.com.zone
Imported 42 records into example.com
Nameservers ns1.logi-ciel.co ns2.logi-ciel.co ns3.logi-ciel.co
$ lc dns record add example.com shop --lb shop-lb
shop.example.com A 203.0.113.80 TTL 300
shop.example.com AAAA 2001:db8:4c1::80 TTL 300
$ dig +short shop.example.com @ns1.logi-ciel.co
203.0.113.80
Questions
Questions about DNS.
Is DNS billed for any domain?
Do you register domains?
How do I move a zone without downtime?
dig against our nameservers. Then change the nameservers at your registrar. Both sets give the same answers while caches expire.Works with
Floating IPs
Public IPv4 addresses that move from one server to another within 5 seconds. Use them for failover, or to keep an address through a rebuild.
Load balancers
Spread TCP and HTTP traffic across the servers that pass their health checks. TLS certificates are issued and renewed for you.
Object storage
S3-compatible buckets in each region, for backups, media and datasets. Billed by the TB stored, with no charge per request.
Start with one server and one command.
Choose a region and a plan, and add an SSH key. The server answers SSH 38 seconds after the command, at the price on its spec sheet.