Overview

Last change on 2025-10-07 • Created on 2025-10-07 • ID: NE-AB1F6

DNS

A Domain Name System (DNS) converts domain names to IP addresses.

Client

Request:
curl example.com


Response:
Hello world!

example.com
⇄
203.0.113.1
203.0.113.1
⇄
Hello world!

DNS
A
example.com
203.0.113.1
Server
web server
Hello world!

With our DNS, you can:

  • Manage DNS zones
  • Manage DNS records

To use our DNS, you have to own a domain. Either with us (see Hetzner domain check) or with a different provider.

Pricing

We do not charge for our DNS.

Available record types

For more information about the purpose of each record, see see record overview.

Record types that resolve requests:
  • A
  • AAAA
  • HTTPS
  • SVCB
  • CNAME
  • SRV
  • MX
  • NS
Other record types:
  • TXT
  • CAA
  • DS
  • PTR
  • TLSA
  • HINFO
  • RP
  • SOA

Record types that you can manage by manually adding them in the BIND file:

  • DANE

Authoritative name servers

Authoritative name servers store and provide the actual DNS records (like A, AAAA, MX) for a domain.

  • Primary name servers

    Primary name servers store the DNS records that are managed in the primary zone.

    Name server IPv4 address  IPv6 address
    hydrogen.ns.hetzner.com. 213.133.100.98 2a01:4f8:0:1::add:1098
    oxygen.ns.hetzner.com. 88.198.229.192 2a01:4f8:0:1::add:2992
    helium.ns.hetzner.de. 193.47.99.5 2001:67c:192c::add:5

  • Secondary name servers

    Old name servers for Robot customers

    Secondary name servers store a copy of the primary name server's DNS records, which they retrieve and update regularly via AXFR requests.

    Name server IPv4 address  IPv6 address
    ns1.first-ns.de. 213.239.242.238 2a01:4f8:0:a101::a:1
    robotns2.second-ns.de. 213.133.100.103 2a01:4f8:0:1::5ddc:2
    robotns3.second-ns.com. 193.47.99.3 2001:67c:192c::add:a3

  • Name servers for konsoleH customers

    If you need to provide the IP addresses to your current registrar, you may use the following addresses:

    Name server IPv4 address  IPv6 address
    ns1.your-server.de. 213.133.100.102 2a01:4f8:0:1::5ddc:1
    ns.second-ns.com. 213.239.204.242 2a01:4f8:0:a101::b:1
    ns3.second-ns.de. 193.47.99.4 2001:67c:192c::add:b3

    Note: In August 2023, the IP addresses 213.133.106.251 and 2a01:4f8:d0a:2006::2 for ns1.your-server.de have been replaced with 213.133.100.102 and 2a01:4f8:0:1::5ddc:1.

Recursive name servers

Recursive name servers find the IP address for a domain by retrieving it from authoritative name servers. When you request a domain (e.g. via browser or curl), the request is handled by a recursive name server. If you want to, you can specify which recursive name server should be used. For example:

dig @<recursive_ip_address> example.com

Official Hetzner domain name servers:

These ONLY work on cloud servers and dedicated servers in Hetzner data centers.

  • IPv4 addresses of our recursive DNS servers:

    185.12.64.1
185.12.64.2

  • IPv6 addresses of our recursive DNS servers:

    2a01:4ff:ff00::add:1
2a01:4ff:ff00::add:2

Due to the load balancer setup, the IP addresses that we use to perform DNS queries from our recursive DNS servers to other authoritative DNS servers are not identical with those IPs mentioned above.

We publish a list of the network ranges from which we perform queries with the TXT record locations.recursivedns.hetzner.com.

Supported TSIG key algorithms

  • hmac-md5
  • hmac-sha1
  • hmac-sha256

Resources and Attributes

The following resources and attributes are associated with this feature:

Limits

  • At least 60 seconds as TTL value for each record
  • Up to 500 records per zone
  • Up to 25 zones across all projects

Please note: It can be possible to increase default zone limits if requested.

Table of Contents