One outage takes everything down
When DNS fails, your website, email, online shop and customer logins disappear together. In October 2016, an attack on one DNS provider, Dyn, left many of the web's best-known sites unreachable for hours.
Early access
DNS hosting for less than a coffee a month.
Host your zones with us, keep your own DNS servers and add ours as secondaries, or add us as an extra provider so a single outage doesn't take your domain offline. DNSSEC included. From $3 a month.
Why your business needs reliable DNS hosting
Every visit to your website, every email sent to you and every login to your apps starts with a DNS lookup. If your domain's nameservers don't answer, all of them fail at once, even though the servers behind them are fine.
Your email depends on it
MX, SPF, DKIM and DMARC records decide whether your mail arrives or lands in spam. You need a DNS host that supports every record type and applies changes in seconds.
Independent of your web host
DNS bundled with a domain or hosting plan is an add-on, not the product. Keep it separate and your records stay put when you change web hosts or registrars.
Protection against forged answers
DNSSEC signs your records so resolvers can reject forged answers that would send your customers to an impostor's site. We sign managed zones automatically.
Three ways to use rtpdns
A domain can list nameservers from more than one provider. If one set doesn't answer, resolvers ask the next, which is why many large companies use more than one DNS provider.
For secondary and tertiary DNS, the server we copy from must allow zone transfers. Not every DNS provider does, so tell us who you use and we'll check before you sign up.
What you get
Changes in seconds
A record change reaches every nameserver within seconds, and a new zone is answering in under ten.
DNSSEC built in
Managed zones are signed with ECDSA P-256 and NSEC3. We give you the DS record to add at your registrar.
Your own nameserver names
Put ns1.yourcompany.com in front of our servers. Our addresses are reserved, so your glue records never need to change.
IPv4 and IPv6
Every nameserver answers over IPv4 and IPv6, on UDP and TCP, with rate limiting against amplification attacks.
Pay for what you use
Queries are counted per zone. Flat monthly plans, metered overage with a spending cap, and attack traffic is never billed.
No lock-in
Bring zones in as standard zone files or transfers, and export any zone as a zone file whenever you like.
Set up secondary DNS
Keep editing zones where you do today. When a zone changes, your server notifies us, we copy the change, and our nameservers answer with it within seconds. We also check your zone's serial on its SOA refresh schedule, in case a notification goes missing.
- Transfer server
xfr.rtpdns.com(157.151.212.132)- Nameservers
ns1.rtpdns.comandns2.rtpdns.com- TSIG key
- HMAC-SHA256, named
xfr.plus your zone, likexfr.example.com
- Send us your zone and your server's address. We'll send you a TSIG key for it.
- Allow zone transfers to xfr.rtpdns.com, signed with that key or by IP address.
- Send NOTIFY to xfr.rtpdns.com when the zone changes.
- List our nameservers at your registrar, next to yours or instead of them.
For example, in BIND:
key "xfr.example.com" {
algorithm hmac-sha256;
secret "the key we send you";
};
zone "example.com" {
type primary;
file "example.com.zone";
allow-transfer { key "xfr.example.com"; };
also-notify { 157.151.212.132; };
};Pricing
Starter
$3/month
- 10 zones
- 10 million queries a month
- DNSSEC
- Secondary and tertiary DNS
MSP
$15/month
- 100 zones
- 50 million queries a month
- Everything in Starter
- Your own nameserver names
Beyond your plan
Metered
- $0.20 per extra zone a month
- $0.25 per extra million queries
- A spending cap you set
- Attack traffic never billed
Questions
What does early access mean?
We're setting up a small number of customers by hand while we finish the dashboard, API and billing. Today rtpdns runs two nameservers in Ashburn, Virginia, and we plan to add more locations before general availability.
Do I have to move my domain to you?
No. Your domain stays with your registrar. You only change which nameservers it lists.
How do I change records in a managed zone?
During early access, reply to our email with the change and we'll make it for you. The dashboard and API will let you make changes yourself.
What's the difference between secondary and tertiary DNS?
On our side they work the same way: we copy your zone from the server that holds the master copy. Secondary usually means we're the second set of nameservers next to your own. Tertiary means we're a third, next to your primary and another secondary provider. The more independent providers you list, the smaller the chance that one outage takes your domain offline.
Can I bring my existing zones?
Yes. Send us a zone file, or we'll copy the records from your current provider. Then switch the nameservers at your registrar.
Which record types do you support?
All the common ones: A, AAAA, CNAME, MX, TXT, SRV, CAA, NS, PTR, DS and more.
Where are your nameservers?
ns1.rtpdns.com and ns2.rtpdns.com are separate servers, each with its own IPv4 and IPv6 address.
Request early access
Tell us about your domains and how you'd like to use rtpdns, and we'll reply by email to get you set up.
We only use your details to reply to you.