Secondary DNS
Pair DNSimple with another DNS provider, as primary or secondary. Zone transfers keep both in sync, so if one provider goes down, the other keeps answering.
We love DNS Hosting so you don't have to
Automate DNS hosting with the REST API, the official CLI, Terraform, or your AI agent, DDoS defense included on every plan.
- A browser asks where bingo.pizza lives
- DNSimple's independent DNS infrastructure answers with A 198.51.100.7, signed with DNSSEC and shielded by DDoS defense
- The browser connects securely to https://bingo.pizza
DNS hosting without the manual work
Manage your entire DNS setup straight from the terminal or plug into the CLI.
Delegate to an AI agent
Your agent uses the DNSimple CLI to find and change records alongside the rest of its work.
Which records still point to the old server?
Two A records on bingo.pizza point to 203.0.113.10: the root and www.
Move them to 198.51.100.7
Done. Both A records now point to 198.51.100.7.
Script it with the CLI
Create and update records from your terminal, scripts, and CI pipelines without opening the web app.
dnsimple zones records create bingo.pizza --type A --name app --content 198.51.100.7
| Field | Value |
|---|---|
| Type | A |
| Name | app |
| Content | 198.51.100.7 |
| TTL | 3600 |
Build on the API
Add DNS management to the tools and services your team already relies on.
curl --request POST \
--header "Authorization: Bearer $DNSIMPLE_TOKEN" \
--header "Content-Type: application/json" \
--data '{"type": "CNAME", "name": "blog", "content": "blog.example.net"}' \
"https://api.dnsimple.com/v2/$ACCOUNT_ID/zones/bingo.pizza/records"
Codify it with Terraform
Keep your DNS configuration in version control with the official DNSimple provider.
terraform plan
+ dnsimple_zone_record.www will be created
Plan: 1 to add, 0 to change, 0 to destroy.
terraform apply
Apply complete! Resources: 1 added.
Leave the hard parts of DNS to us
Redundancy, trust, and protection that take specialists to build. Turn them on from your dashboard.
Reverse DNS
Point IP addresses back to hostnames with PTR records. Mail servers check them before they trust your email.
DNSSEC
Sign your records so resolvers can verify that every answer came from you, unaltered.
HTTPS Redirects
Forward a domain to any URL, over HTTP or HTTPS, without running a web server.
DDoS Defense
Floods of malicious traffic get filtered out, so real visitors still get answers. Included on every plan.
Stuck on DNS? Our engineers will work through it with you.
Human support is our default, not an upgrade. Every plan includes help from engineers who work with DNS and domains every day, at no extra cost. Teams plans and above get priority.
Frequently Asked Questions
What is DNS hosting?
DNS hosting stores and serves the DNS records that direct visitors, email, and other services to the right place. DNSimple lets you manage those records through the web app, API, CLI, or Terraform.
Can I automate DNS changes with DNSimple?
Yes. You can manage DNS through the DNSimple API, the official CLI, and the DNSimple Terraform provider.
Can DNSimple be my primary or secondary DNS provider?
Yes. Use DNSimple as your primary DNS provider, or configure Secondary DNS for additional redundancy with another provider.
Is DDoS defense included with DNS hosting?
Yes. Every DNSimple plan includes DDoS defense at no additional cost.
Does DNSimple support DNSSEC?
Yes. DNSSEC is available on every plan to help protect the integrity of your DNS records.
How quickly can I get help with DNS?
Every request is handled by a person, with a reply within 24 hours. Teams plans and above receive priority support.