DNS management
DNS management lets you manage the Domain Name System (DNS) records for your domains - the records that point your domain at your servers and mail. This page covers ordering DNS management; once active, you manage the records from the service itself.
Note
If you already run a cPanel or DirectAdmin control panel, we recommend managing DNS with its built-in DNS tools instead of Customer Center DNS management. See the control panel's own documentation for how to manage DNS there.
Order DNS management
- Open the Order menu and select DNS Management.
- Select the Manage dns records for your domains product and add it to your cart.
- Complete the order. The product is free, so there is no charge to add it.
Add a domain (zone)
Open the DNS management service from Services > DNS Management. It lists the domains (zones) it manages. Select Add domain to add a domain, or Add domains in bulk for several at once.
Nameservers
For Hosted Power to answer Domain Name System (DNS) queries for a domain, the domain must point at the Hosted Power nameservers. Set these at the domain's registrar:
ns1.hosted-power.com
ns2.hosted-power.com
ns3.hosted-power.comImportant
When you transfer a domain, its current nameservers keep answering until you switch. Add all your DNS records here first, then switch the nameservers - that way there is no moment where records are missing and your application or mail briefly stops resolving.
Add and edit records
-
Tick the domain you want to change in the Domain list.
-
Use the record buttons for the type you need: Add A record, Add MX entry, Add new Alias Name (a CNAME), and More for the other types. DNS Templates apply a set of records at once, and Clone DNS settings copies records from another zone.
-
Fill in the record and Submit.
A record has three parts:
-
Name - the host the record is for (leave it on the default for the domain itself, or enter a subdomain such as
www). -
Time to Live (TTL) - how long resolvers may cache the record (for example 10 minutes).
-
Content - the value: an IP address for an A/AAAA record, a hostname for a CNAME or MX record, or text for a TXT record.
Common records:
DNSSEC
Domain Name System Security Extensions (DNSSEC) add a layer of trust to the Domain Name System (DNS). DNSSEC signs the answers for your zone with a cryptographic key. A resolver that looks up your domain can then check the signature and detect if an answer was changed on the way. If the signature does not match, the resolver treats the answer as invalid instead of sending your visitor to the wrong place.
This protects against a man-in-the-middle attack, where an attacker sits between your visitor and the DNS and returns forged records to redirect traffic. DNSSEC is optional. You enable it per zone.
How it works
DNSSEC uses a public and private key pair:
- The private key stays on the server that manages your DNS zone and signs the records.
- The public key is published at your domain's registrar, so resolvers can verify the signatures.
Both sides must match. This is why enabling DNSSEC always has two parts: sign the zone, then publish the key at the registrar.
Verify your setup
Warning
A wrong DNSSEC key or a mismatch between the zone and the registrar can make your whole zone fail to validate. Resolvers then reject every answer, and all services on the domain (website and mail) stop resolving. Always verify after any change.
Check your zone with the DNS visualization tool at https://dnsviz.net/. Enter your domain and it
draws the delegation from the root of the internet, to the top-level zone (for example .com), down
to your own zone. If DNSSEC validates, the chain is green. If it is misconfigured, the records for
your zone turn red and show the error.
Enable DNSSEC when TurboStack manages your DNS
When your zone runs in the DNS management service in the Customer Center, TurboStack sets up DNSSEC for you. Open a support ticket, tell us which domain you want to enable DNSSEC for, and we handle the signing and the registrar side. See Support.
Enable DNSSEC when DNS is hosted externally
When your zone is hosted outside TurboStack, you enable DNSSEC in two steps:
-
Sign the zone at the provider. Turn on DNSSEC where the zone lives - your external DNS provider, or the control panel on your server (for example cPanel or DirectAdmin). This generates the key pair and signs the zone. Follow the provider's own guide for the exact steps.
-
Publish the key at the registrar. Copy the public key details the provider gives you and add them at your domain's registrar. If Hosted Power is your registrar, open a support ticket with the key details and we add them at the domain level. If another company is your registrar, add the details in their control panel or contact their support.
Note
Some control panels only expose DNSSEC once it is enabled at the server level. If you cannot find the option, check the panel's documentation or ask the party that manages the server.