Delegation
Websites → DNS on a domain, or a zone on the Overview. DNS records and signing for this zone.
A DNS zone. Delegation, records, DNSSEC.| Box / button | What it does |
|---|
| Verdict pill | pass, warn or fail for the zone as a whole. |
|---|
| local · soa · nameserver addresses · delegation · nameservers · dnssec | One row per check, pass, warn or fail, with the reason. |
|---|
| Delegated to, in public DNS | Nameservers the world sees. |
|---|
| This platform's nameservers | Nameservers here. The two should match. |
|---|
| Repair the SOA | Shown when the SOA check fails. Rewrites it to name this zone's own nameserver. |
|---|
| Glue records | Needed only when your nameservers sit inside the domain itself; then set these at the registrar. Otherwise None for this domain. |
|---|
Records
| Box / button | What it does |
|---|
| Search records… | Filter. |
|---|
| Name · Type · Value · TTL | Each record. |
|---|
| Add record | Opens the form. |
|---|
| Name (form) | Part before the zone, e.g. www. @ = the zone itself. |
|---|
| Type | A, AAAA, CNAME, MX, TXT, SRV, CAA, NS, PTR. Default A. |
|---|
| Value | e.g. 203.0.113.10. MX: priority first, e.g. 10 mail.example.com. Note the trailing dot. |
|---|
| TTL (seconds) | How long resolvers may cache it. Default 3600. Lower it before a planned change. |
|---|
| Delete | Removes it. Resolvers may keep the old answer until its TTL runs out. |
|---|
DNSSEC
| Box / button | What it does |
|---|
| Status pill | not signed, signed, or signed, not at registrar. |
|---|
| Sign this zone | Signs it here. Delegated elsewhere: asks first. Only do it when moving the domain here. |
|---|
| Give these to your registrar | The DS records, with copy. Any one works; give all if the form takes several. |
|---|
| Turn off | Stops signing. |
|---|
Signing counts only once the registrar has the DS record. Until then: harmless, does nothing.