DNS hosting and DNSSEC

PlusPanel runs its own authoritative nameservers in the EU. Zones you create in the panel are served by them within seconds; the panel’s database is the source of truth, and each nameserver is checked against it continuously.

Use PlusPanel DNS for a domain

1. In the panel’s DNS section, add a zone for the domain.
2. Fill it from a template or add the records yourself.
3. At your registrar, set the domain’s nameservers to the ones the panel shows.

Until the delegation changes, nothing changes for visitors: the zone exists in PlusPanel but the internet still asks your previous DNS provider.

Records

The usual record types are supported (A, AAAA, CNAME, MX, TXT, SRV, CAA, NS, DS at delegation points). Every record is validated before it is saved, so a typo cannot break the zone. TXT and CAA values must be printable ASCII without " or \.

Some records are managed by PlusPanel and shown read-only:

• the records of a site that uses PlusPanel DNS (its addresses, and its certificate validation);
• the mail records of a domain with mailboxes (MX, SPF, DKIM, DMARC, MTA-STS), see DNS records for external DNS if your zone lives elsewhere;
• a CAA record allowing Let’s Encrypt for the host names of sites with automatic certificates, unless you publish your own CAA there.

DNSSEC

Turn DNSSEC on per zone. PlusPanel signs the zone and shows the DS record to publish at your registrar; confirm in the panel once it is published. Subzones delegated inside PlusPanel get their DS records automatically.

Wildcard certificates

A site whose zone is in PlusPanel DNS can use the DNS certificate mode: the control plane proves the domain through DNS and installs the certificate on the server, including wildcard names. See Sites, domains and TLS.

Limits

A zone cannot overlap another organization’s zone. On the Free edition, domains (site domains and DNS zones together) count against the edition’s limit; see Billing and editions.