Anycast DNS with sub-millisecond resolution, instant propagation, full record type support, DNSSEC, and complete API management. Included free with every domain on Sigilhosting or available standalone for domains registered elsewhere.
A, AAAA, CNAME, MX, TXT, SRV, CAA, NS, and PTR records. Wildcard records (*.example.com) for catch-all routing. TTLs configurable from 60 seconds to 86400 seconds (1 day) per record.
MX records support priority weighting for mail server failover. SRV records support service discovery with weight, priority, and port specification. CAA records control which certificate authorities can issue certificates for your domain — important for preventing unauthorized certificate issuance.
TXT records have no practical length limit. We handle the 255-byte chunking required by the DNS protocol automatically. This matters for SPF, DKIM, DMARC, and domain verification records that can exceed a single DNS TXT chunk.
When you create, update, or delete a DNS record via API, dashboard, or Terraform, the change propagates to all anycast nodes within seconds. Our internal replication protocol pushes updates to every node in parallel.
This is different from traditional DNS hosting where changes can take minutes to propagate between primary and secondary nameservers. On Sigilhosting, all nodes are equal peers — there's no primary/secondary distinction and no replication lag.
Note that propagation to end users still depends on resolver caching. If a resolver has cached a record with a 3600-second TTL, it won't re-query until that TTL expires. Set shorter TTLs (60-300 seconds) for records you change frequently.
DNSSEC cryptographically signs your DNS records, preventing cache poisoning and man-in-the-middle attacks. When enabled, resolvers verify that the response actually came from your authoritative nameserver and wasn't modified in transit.
Activation is one click in the dashboard or a single API call. We generate the signing keys (KSK and ZSK), sign your zone, and publish the DS record to your registrar automatically for domains registered on Sigilhosting. Key rotation happens on a configurable schedule.
For domains registered elsewhere, we provide the DS record values to add at your registrar. DNSSEC is available on all supported TLDs at no additional cost.
Manage all records via REST API, CLI, Terraform, or SDK.
The DNS API supports all CRUD operations on zones and records. Create records individually or in batches. The Terraform provider supports dns_zone and dns_record resource types for infrastructure-as-code workflows.
Zone import supports both AXFR transfers (point your existing primary at our import endpoint) and file upload (standard BIND zone file format). Both methods import all record types with TTL values preserved.
Included with every domain. Full API control.