Features and Differences

Last change on 2025-10-07 • Created on 2025-10-07 • ID: NE-3F8D2

The integration of Hetzner DNS into the Hetzner Console comes with some new features and behavioral changes, compared to the DNS Console.

New Features

  • Integration into the Hetzner Console
    You can organize your DNS zones by project, track them via a dashboard and activity history, and more. You can also invite other accounts to your project, allowing them to view and modify your zones.

  • Integration into the Cloud API
    Includes support for actions and official integrations such as hcloud CLI, hcloud-go, hcloud-python, Terraform, Ansible, external-dns and cert-manager. As API tokens are scoped per project, you can restrict access to specific zones by placing them in separate projects.

  • Support for more record types
    Those include A, AAAA, CAA, CNAME, DS, HINFO, HTTPS, MX, NS, PTR, RP, SOA, SRV, SVCB, TLSA, and TXT.

  • Zone protection
    Zones now feature an optional protection that prevents accidental deletion.

  • RRSet protection
    Similarly, RRsets feature an optional change protection that prevents modification or deletion.

  • Record comments
    Each record now has a comment field that can be used to describe the record's purpose.

  • Labels
    Like other Hetzner resources, labels can be added to both zones and RRsets.

  • TSIG
    When creating a secondary zone, you can specify transaction signature keys to use for zone transfers.

Differences

  • The new API is based on Resource Record Sets (RRset) instead of individual records. An RRset is identified by a name and type. For example, two records with name @ and type MX are considered part of the same RRset.
    Most notably, all records of a single RRset share the same TTL.

    The new API, however, also includes two convenience endpoints to add and remove individual records, regardless of their RRset.


  • There are new validations in place, making sure that a zone is correctly configured.

    This includes strict rules regarding the NS and SOA records (as described in the migration process requirements), duplicate record checks, and proper TXT record quoting.

    Additionally, the new Hetzner DNS system regularly runs delegation checks, ensuring the parent zone (domain) is properly configured to use Hetzner's name servers for DNS resolution.

Table of Contents