DNS Providers - Let's make a list (in light of recent DDOS)

HackedServer

@shafire said:
Please also note, if they support IPv6, Secondary DNS, DNSSEC (full support or only as Secondary DNS), and in which country the provider is based.

I agree that that would be useful information. I wish deeply that Route53 supported AXFR/notifys.

@ricardo said:
As a side benefit, I found out that Cloudflare doesn't honour 'ANY' DNS requests (I gather DNS records for a separate project).

I hate that they do that.
https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/?include_text=1

ricardo

HackedServer said: I hate that they do that. https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/?include_text=1

Indeed. I'd noticed a few months back that resolving domains were showing no DNS records in my system, and noted it was domains using Cloudflare nameservers. We gather the data so our users can see domains that share nameservers, IPs etc.

They put forward the argument that there's no legitimate use for public use of ANY, curiously they are able to "import existing DNS records" when you add a domain to use cloudflare DNS (and they won't be using AXFR). I would assume that they are using ANY, otherwise iterating all known DNS record types would be horribly inefficient.

shafire said: Please also note, if they support IPv6, Secondary DNS, DNSSEC (full support or only as Secondary DNS), and in which country the provider is based.

I'll try be charitable and make it a more comprehensive/useful comparison. Collating them into one place is a start.

Saragoldfarb

@jmginer said:
Our DNS service costs 10€/year with no limit of requests or domains, cPanel interface + API, hosted in 4 different locations in Spain, dual stack IPv4 / IPv6, and DDoS protected via Voxility. You can order here: https://ginernet.com/cart.php?a=add&pid=121

Nice. Can I create vanity nameservers? Is it possible to use them as slaves/secondary dns?

mik997

@HackedServer said:

I hate that they do that.
https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/?include_text=1

I think the CF motivation in refusing ANY queries is to prevent information gathering/reconnaissance type queries and also to mitigate the use of ANY queries in DNS amplification attacks

tmwc

Could I add Linode?

They offer free DNS (keep in mind you don't have to verify CC or order a VPS from them either)

Oh, and yes they do have a API.

Umair

Any of these Providers have DDOS protection and can integration with cPanel ??

((i.e. update records directly via WHM/DNS Cluster ?))

jmginer

@shafire said:

@jmginer said:
Our DNS service costs 10€/year with no limit of requests or domains, cPanel interface + API, hosted in 4 different locations in Spain, dual stack IPv4 / IPv6, and DDoS protected via Voxility. You can order here: https://ginernet.com/cart.php?a=add&pid=121

Do you support DNSSEC at least as secondary?

cPanel still not support DNSSEC in clusters.

ascendrix

Please add SoftLayer (an IBM company) to the list. They offer anycast DNS for free with all their accounts (even if there's no service on the account). https://knowledgelayer.softlayer.com/topic/dns and they also have an API https://sldn.softlayer.com/blog/phil/getting-started-dns

jmginer

@Saragoldfarb said:

@jmginer said:
Our DNS service costs 10€/year with no limit of requests or domains, cPanel interface + API, hosted in 4 different locations in Spain, dual stack IPv4 / IPv6, and DDoS protected via Voxility. You can order here: https://ginernet.com/cart.php?a=add&pid=121

Nice. Can I create vanity nameservers? Is it possible to use them as slaves/secondary dns?

Not in this package.

eLohkCalb

There's also DNSPod, which has API, provides a not-so-widely-seen record by geography region/country feature, and is free.

Lunar

I just prefer having my own DNS servers.

deadbeef

@lunar

paste.cryptoworld.is’s DNS address could not be found.

ldrrp

cloudns is basically free is you keep your domains registered with them. It adds time to your subscription everytime you purchase or renew a domain name

ricardo

basically free

No They have a mark up and that pays for the equivalent of what you'd have in a subscription to their DNS services, it probably works out more costly... at least wrt their larger plans.

Lunar

@deadbeef said:
@lunar

paste.cryptoworld.is’s DNS address could not be found.

Oh sorry, should work now.

iKeyZ

there's also https://dnsimple.com which has an API

fan

@ascendrix said:
Please add SoftLayer (an IBM company) to the list. They offer anycast DNS for free with all their accounts (even if there's no service on the account). https://knowledgelayer.softlayer.com/topic/dns and they also have an API https://sldn.softlayer.com/blog/phil/getting-started-dns

Is it possible to create a Softlayer account without real purchase?

ascendrix

@fan Yes, just order their Pay As You Go object storage: http://www.softlayer.com/object-storage You'll need a CC for that though.

geekalot

Received an email from Zilore with their Commercial plans.

We are happy to announce our commercial plans available from 2016-12-01 including a number of new long-awaited features: User API Custom SSL for Web-Forwarding Multiuser Email Notifications Two-factor Authentication and our two new great services: Failover Website Website & Web Application Monitoring All added and delegated domain names before 2016-12-01 will get our free of charge Early Adopter plan with all available now options. Free domain name addition and delegation after 2016-12-01 will not be available

Details are here: zilore.com/en/plans.pdf

One of the things that stands out for me is:

• API is not available in "Early Adopters" tier, only "Professional" ($25/mo) and "Business" ($250/mo) tiers. Presumably then, dns-01 challenge for LetsEncrypt for "Early Adopters" is a no-go

Eriktwn

What about performance of those free ones services?

clarity_64

I am pretty sure that dns.he.net just got hit again with an attack or something happened to their cluster. I guess I'll look into moving to Cloudflare.

geekalot

@ascendrix said:
@fan Yes, just order their Pay As You Go object storage: http://www.softlayer.com/object-storage You'll need a CC for that though.

A big thank you to @ascendrix for this info. Confirming that this does work. (And btw, SL/IBM calls you almost immediately after order to find out what you plan to do with the service; even though $0 billed).

Edit: I find SL to be a better secondary than HE because, among other things:

• you can set the sync time per domain for the axfr (like a cronjob), whereas HE appears to do it only every 2 hours no matter what the TTLs or if DNS changes have occurred.
• HE's approach can then have your zones out of sync for up to approx 2hrs. So, forget things like dns-01 challenge for LetsEncrypt.

lifehome

@ascendrix said:
@fan Yes, just order their Pay As You Go object storage: http://www.softlayer.com/object-storage You'll need a CC for that though.

Will there be any catch using this service? Also any vanity namserver from them?
Might worth considering to settle on SL if it's good enough without hassle.

ascendrix

@lifehome There are no catches AFAIK. No, vanity however.