Skip to content
Register

Looking for registrar that supports both DNSSEC and ALIAS records

Domain Names by GeorgeNmp 4 replies 365 views
GeorgeNmp

Member OP

AS64512

3 #1

Current situation: my provider at OVHcloud forces a choice. Enable DNSSEC and ALIAS records become unavailable. Their support claims this is a "platform limitation" but cannot articulate whether it is a signing boundary issue or simply unsupported record types in their DNS implementation.

Requirements:
- DNSSEC with KSK/ZSK rotation
- ALIAS at apex (RFC-compliant or close enough for CNAME-like behavior)
- API for automation

I have verified that the limitation is not at the registry side. This appears to be a constraint in their DNS software stack. I am open to migrating a small portfolio if the replacement meets both criteria without forcing me to choose between security and convenience.

Has anyone found a provider that does both correctly?

iBGP, eBGP, don't care, just peer
Nadia

Member

/dev/null enthusiast

#2

GeorgeNmp: your requirements were redirected to /dev/null by OVHcloud's product team, I suspect. Their DNS stack cannot pipe ALIAS through to the signer, so the record gets EOF before validation.

| RackNerd: docs claim both, I tested and they pipe correctly
| Vultr: ALIAS is just CNAME flattening with extra steps, redirected my ticket for 3 weeks
| HostHatch: no DNSSEC at all, do not bother

/dev/null: full of good ideas
GR

Member

#3

Cara I feel you GeorgeNmp, I had this same thought last monthkkkkk

I was going to use Contabo but then I see they going to charge extra for DNSSEC signing, véi, that is wild

Going to check RackNerd now cause Nadia said it works, going to report backkkkk

Izmir

Member

#4

ALIAS I never try, I tought it was same as CNAME my friend. Very nice price also they have API but docs is bad, you need to test yourself my friend. I can check tonight if you want my friend!

mateo_dragon

Member

#5

GeorgeNmp, what API format RackNerd uses, REST or something else?

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft