Skip to content

Managing DNS

SuperSpace hosts an authoritative DNS zone for every domain you manage. From the dashboard you can view that zone, add and edit records (A, AAAA, CNAME, MX, TXT, CAA, SRV, NS, and more), delete records, and turn DNSSEC on or off — all without leaving your browser.

Live, in-place editing

The records table updates in place — there's no page to reload after you add or change a record. If two people have the same zone open, each one sees the other's edits as they happen. If a record you just added doesn't appear, check the form for a validation error rather than assuming a propagation delay.

Before you start

  • A domain whose DNS is hosted by SuperSpace (every domain registered with us, or added to us, gets a zone automatically)
  • Edit access to the workspace that owns the zone
  • An active (non-trial) account — trial accounts are redirected to the trial onboarding screen and can't view or edit DNS zones

Open the DNS editor

There are two ways to reach the same zone.

  1. From a domain. Open the domain from your Domains list. The domain page opens on the Overview tab; switch to the DNS tab in the left sidebar to see the records editor.

  2. From the DNS Zones list. This list shows every zone you can manage; each row shows the Domain, the Workspace that owns it, and the number of Records. (A small lock icon next to a domain means DNSSEC is on.) You can reach it from a domain that has no zone yet — the empty state offers a View all zones button — or by following the breadcrumbs back up from an individual zone. Click a domain name in the list to open its zone on the Overview, then switch to the DNS tab to edit records.

The records table on the DNS tab has four columns — Name, Type, Content, and TTL — plus edit and delete controls on each row.

Nameserver and system records

Your zone's NS (nameserver) records are listed for reference but can't be edited or deleted — their edit and delete buttons are greyed out. A few records SuperSpace manages for you (for example the CDN routing record on a site domain) are locked the same way and aren't editable here.

Add a record

  1. Go to the DNS tab for the zone (see above).

  2. Pick the record type. Under Add Record you'll see a button for each type you can create: A, AAAA, CNAME, MX, TXT, CAA, SRV, NS, SVCB, and HTTPS. Click the one you want.

  3. Fill in the form. The page opens a Create New <TYPE> Record form. The fields shown depend on the type:

    Type Fields you fill in
    A IP Address (IPv4, e.g. 192.0.2.55)
    AAAA IP Address (IPv6)
    CNAME Target (e.g. www.example.com)
    MX Mail Server and Priority (0–65535)
    TXT Content
    CAA Server Hostname, Flags, and Tag (e.g. issue)
    SRV Server Hostname, Priority, Weight, and Port
    NS Target
    SVCB / HTTPS Wire-format value (e.g. 1 . alpn="h3,h2")

    Every record type also has:

    • Record Name — the host part of the record. Leave it empty for the root of the domain; otherwise type the label (e.g. www). The zone name is appended for you and shown beside the field.
    • TTL — time to live, in seconds (e.g. 14400).
    • Comment — an optional internal note that shows under the record name in the table.

  4. Save. Click Save. The new record appears in the table immediately. To back out without saving, click Cancel.

Tip

For an A or AAAA record at the root of your domain, leave Record Name empty. For a subdomain like blog.example.com, enter blog.

Edit a record

  1. On the DNS tab, find the record in the table.

  2. Click the edit (pencil) icon on that row.

  3. The Update <TYPE> Record form opens with the current values. Change the value, TTL, or comment as needed, then click Update.

You can't rename a record in place

The Record Name field is locked while editing. To change the name, delete the record and create a new one with the name you want.

Delete a record

  1. On the DNS tab, find the record in the table.

  2. Click the delete (trash) icon on that row.

  3. Confirm when prompted — the dashboard asks "Are you sure you want to delete this record?" The record is removed from the table right away.

Warning

Deleting a record takes effect immediately. Removing the wrong record (for example an MX record) can interrupt mail or break a service, so double-check before you confirm.

DNSSEC

DNSSEC adds cryptographic signing to your zone so resolvers can verify the answers came from you. On the DNS editor you turn it on or off with a single control. The DNSSEC field on the records card reports the signing status as Active or Inactive; the domain's Overview Status card reports the same thing as Enabled or Disabled.

Turn DNSSEC on

  1. On the zone, find the DNSSEC Disabled button (top-right of the records card).

  2. Click it. A confirmation dialog titled Enable DNSSEC appears. Its message reflects how the domain is registered:

    • When SuperSpace is the registrar for the domain's extension, the dialog tells you that enabling DNSSEC signs the zone and automatically registers the keys at the registrar for you — it's a single click.
    • Otherwise, the dialog tells you that once DNSSEC is active you'll need to update your domain registrar with the appropriate records. After enabling, copy the zone's DS record to wherever the domain is registered to finish the setup.

  3. Click Confirm. The button changes to DNSSEC Enabled and the records card's DNSSEC field shows Active.

Get the DS record to hand to another registrar

When DNSSEC is on, the DNSSEC field shows a (show) link. Click it to open the DNSSEC details dialog, which lists the DS Record plus the Public Key, Digest, Digest Type, Algorithm, Key Tag, and Flags. Copy the DS record into your registrar's DNSSEC settings. Depending on the registrar, you may only need part of this information.

DNSSEC has to match at both ends

DNSSEC only works when the zone is signed and a matching DS record is published at the registry. If you sign the zone here but never add the DS record at an external registrar — or the DS no longer matches — resolution can fail. When SuperSpace is both your registrar and your DNS host, both halves are handled together.

Turn DNSSEC off

  1. Click the DNSSEC Enabled button.

  2. In the Disable DNSSEC dialog, click Yes, disable dnssec. If the domain is registered with SuperSpace, this also removes the keys from the registry. If it's registered elsewhere, remember to remove the DS records at your registrar afterward.

When the DNSSEC control is unavailable

The DNSSEC button is hidden if the domain's extension (TLD) doesn't support DNSSEC. It's also temporarily disabled while another registry operation is in progress on the domain — the button's tooltip reads "This domain is still being processed by the registry. Please try again in a few minutes." and you can retry once that finishes.

Next steps