DNS is the backbone of every domain name. Without it, websites don’t load, emails don’t arrive, and services break.
At Openprovider, we provide a DNS service that’s simple to manage, flexible to use, and powerful enough to support everything from small business websites to large-scale portfolios. Whether you’re a web hoster, agency, developer, or tech-savvy business owner, this article gives you a practical overview of how our DNS works and how you can start helping your customers…
Flexible DNS built in – without additional costs!
Every domain registered with Openprovider includes DNS management at no extra cost.
You can use our nameservers in two ways:
- As master nameservers, where you manage the DNS zone directly through Openprovider.
- As slave nameservers, where Openprovider mirrors a zone hosted elsewhere using AXFR transfers.
We operate our DNS infrastructure across multiple European locations (Ireland, the UK, and Germany), using geographically separated subnets for high availability and fast response times. There’s no formal SLA on the free service, but we’ve implemented rate limits and DDoS mitigation measures to protect against most DNS-related disruptions.
DNS zones can be managed either through our Reseller Control Panel (RCP) or via our API. Both interfaces offer the same functionality and are designed for ease of use and speed.
DNS records and templates
Our platform supports the most commonly used DNS record types, including:
- A / AAAA (IPv4 and IPv6 addressing)
- CNAME (aliases)
- MX (mail servers)
- TXT (used for SPF, DKIM, and DMARC)
- NS, SOA, SRV, and others
You can also use DNS templates to speed up zone creation. A template is a pre-configured set of DNS records that can be reused across domains – handy if you’re managing domains for the same server or service provider. Templates support variables like %domain%, which dynamically insert the domain name when the zone is created.
Important to note: templates can only be applied when a zone is created. If a DNS zone already exists, you’ll need to delete it before applying a template.
How to tackle spam and phishing with DNS
Openprovider DNS supports all the major protocols for email authentication and anti-spoofing, including:
- SPF: to define which servers are allowed to send mail for your domain
- DKIM: to cryptographically sign emails
- DMARC: to collect reports and set policies for handling failed authentication
Combined, these records help reduce spam and phishing from your domain and improve deliverability.
We also support DNSSEC, which adds an extra layer of trust by signing your DNS records. You can enable DNSSEC with one click if you’re using Openprovider nameservers.
Not sure where to begin with DMARC? Start by publishing a p=none DMARC record to begin collecting reports without impacting mail flow, then gradually tighten your policies as your configuration stabilizes.
We’ve set up a full guide on how to do this. It’s designed for users of our hosted DMARC solution, EasyDMARC – but the information about DMARC policies also applies if you’re setting it up manually.
Managing TTL and zone behavior
Every DNS record has a TTL (Time To Live) value that tells DNS resolvers how long to cache the record. Short TTLs (like 5 minutes) are useful for changes or migrations. Longer TTLs (like 24 hours) reduce DNS traffic and improve stability.
We offer a range of TTL options in the Control Panel, from 15 minutes to 1 day. If you need custom values or automation, you can set them via our API. Just remember: changes may take time to propagate, depending on your current TTL and the caching behavior of recursive resolvers.
We also support shadow zones: zones that are configured but not yet active. These are useful when preparing for a domain transfer or registration. Once the domain enters your account, the shadow zone automatically becomes live.
Free domain forwarding
Openprovider offers domain forwarding at no extra cost for domains using our nameservers.
You can choose between:
- 301 (permanent) redirects – best for SEO and long-term moves
- 302 (temporary) redirects – useful for testing or short-term changes
Forwarding is configured via the Control Panel and can be applied to both root domains and www subdomains. If you’re using external nameservers, you’ll need to point your A-record to our forwarding server (34.90.130.132).
For more information, check this article in our Knowledge Base.
Premium DNS: preparing you to go global
For domains that require faster resolution, higher reliability, or better global performance, we offer Premium Global Anycast DNS powered by Sectigo.
With this service, your DNS zones are replicated across a global Anycast network, giving your users the fastest possible response times. Benefits include:
- Blazing-fast resolution via the nearest server
- DDoS protection built into the network
- DNSSEC support
- 99.99% uptime guarantee
- Near real-time propagation
- Easy setup via Control Panel or API
Premium DNS is a paid yearly service that can be activated during domain registration or later via the domain’s detail page. You can copy over existing DNS records from a standard zone and continue managing your records using the same interface. Just keep in mind that a Premium DNS subscription is tied to a specific domain and must be deleted manually if you no longer need it.
Get started today
Openprovider’s DNS platform is designed to give you control without complexity. Whether you’re handling a handful of domains or thousands, our tools make it easy to configure, manage, and secure your DNS zones.
Want to get even more value? Explore Openprovider Memberships to get 1,900+ TLDs at cost price and a full suite of automation tools built for resellers and domain professionals.
