Secondary DNS, hands-off

Your zone, replicated. Your servers, replaceable.

Point an AXFR at us and get three anycast nameservers that keep serving your zone even when your primary is down, gets rebuilt, or moves clouds. No dashboard to babysit — just a link that tells you exactly what's happening.

3Nameservers

60sPull interval

0Passwords

Your zone, as we'll see it

$ORIGIN your-domain.com.

$TTL 3600

ownerTXT—

contactTXT—

primaryNS—

primaryA—

Set up secondary DNS

We'll email you a single link. That link is your access — no account to create.

Your name

Email

Domain

Primary DNS hostname

Primary IPv4

Primary IPv6 (optional)

Transfer authentication

TSIG key My primary supports TSIG-authenticated transfers (BIND, NSD, most self-hosted setups) IP allow-list My primary only supports restricting transfers by source IP (common with hosted DNS providers)

Not sure? Start with TSIG — it's stronger, and you can switch later if your provider doesn't support it.

We'll email a link to verify you own this domain, then walk you through the rest.

How it works

01

Verify

Confirm your email, then drop a TXT record on your domain. We check for it automatically.

02

Connect

We generate a TSIG key and give you the two lines to add to your primary's config.

03

Transfer

We pull your zone over AXFR, validate it, and go live on all three nameservers.

04

Forget about it

We keep pulling. If a transfer ever fails, we keep serving your last good copy — no downtime, no page.