Weird. I don't get such error. Could you send me the resolvers you use ("Your DNS resolvers are:" on the website) so I can check?

LE with DNS validation, can give you as many certs as you want for internal usage.

+1 for Let’s Encrypt and DNS challenge.

So for basically any certificate LE with DNS challenge should be your go to, it’s great and works really well and is what I use for both external and internal services.

You can use wildcard LE certificate with DNS challenge and use it with your domain with whatever IP addresses are.

I think it's more of the web design itself. The page is relatively small with less than 3 MB compressed payload (at least, compared to common websites that use a dozen MBs worth of CSS & JS) w

but their dns is worst.

So been doing some research into this due to attacks taking down a site I run recently, key things to note, I run CF in front of the site (the sites main IP has never been linked directly to DNS only

why would you troubleshoot it using ping (which means ICMP) instead of actually making a dns request? (use dig or something). DNS works on port 53/udp.

on some servers, it doesn't resolve DNS queries when forwarding (usually from Racknerd)

HestiaCP use bind9 for DNS. And server who receive new records is slave (server C). So, probably Master <-> Master setup.

Well depending on what is used underneath by DNS service (PowerDNS, Bind or something else and the backend of the DNS service files/mysql).

DNS protocol provides single master -> multiple slaves synchronization by the usage of NS records and SOA record within each zone

NS1 - server A (dedicated DNS master)

(Quote)

If they have a reverse DNS record like banking.chasebaaank.com, it would be quite obvious.

(Quote)

(Quote)

Anonymized DNS might be added this weekend. DoH is next on my agenda.

4: Sendgrid now fix such issue,all header from used must be active by dns check with mx,cname record.So now,it is hard to send scam,phishing from sendgrid now.