Overview

DNS

A Domain Name System (DNS) converts domain names to IP addresses.

With our DNS, you can:

• Manage DNS zones
• Manage DNS records

To use our DNS, you have to own a domain. Either with us (see Hetzner domain check) or with a different provider.

See the getting started guide to learn how to create a DNS zone.

Pricing

We do not charge for our DNS zones.

Available record types

For more information about the purpose of each record, see see record overview.

Record types that you can manage by manually adding them in the BIND file:

• DANE

Authoritative name servers

Authoritative name servers store and provide the actual DNS records (like A, AAAA, MX) for a domain.

• Primary name servers

  Primary name servers store the DNS records that are managed in the primary zone.

  Name server	IPv4 address	IPv6 address
  hydrogen.ns.hetzner.com.	213.133.100.98	2a01:4f8:0:1::add:1098
  oxygen.ns.hetzner.com.	88.198.229.192	2a01:4f8:0:1::add:2992
  helium.ns.hetzner.de.	193.47.99.5	2001:67c:192c::add:5

• Secondary name servers

  Secondary name servers store a copy of the primary name server's DNS records, which they retrieve and update regularly via AXFR requests.

  Name server	IPv4 address	IPv6 address
  ns1.first-ns.de.	213.239.242.238	2a01:4f8:0:a101::a:1
  robotns2.second-ns.de.	213.133.100.103	2a01:4f8:0:1::5ddc:2
  robotns3.second-ns.com.	193.47.99.3	2001:67c:192c::add:a3

  Note: These name servers are also still used for older primary zones.

• Name servers for konsoleH customers

  If you need to provide the IP addresses to your current registrar, you may use the following addresses:

  Name server	IPv4 address	IPv6 address
  ns1.your-server.de.	213.133.100.102	2a01:4f8:0:1::5ddc:1
  ns.second-ns.com.	213.239.204.242	2a01:4f8:0:a101::b:1
  ns3.second-ns.de.	193.47.99.4	2001:67c:192c::add:b3

  Note: In August 2023, the IP addresses 213.133.106.251 and 2a01:4f8:d0a:2006::2 for ns1.your-server.de have been replaced with 213.133.100.102 and 2a01:4f8:0:1::5ddc:1.

Supported TSIG key algorithms

• hmac-md5
• hmac-sha1
• hmac-sha256

Resources and Attributes

The following resources and attributes are associated with this feature:

• Name
• API token

Limits

• Up to 25 zones across all projects *
• Up to 500 records per zone *
• Up to 50 records per RRset
• Up to 4 primary nameservers (for secondary zones)
• For every record:
  • Up to 4096 characters for the value
  • Up to 512 characters for the comment
  • At least 60 seconds as TTL value

Please note: Limits marked with * can be increased if there is a justified demand.