DNS that answersfrom every corner of the internet.
Every Host Tonic domain gets enterprise anycast DNS on Cloudflare's global network — sub-15ms lookups, DDoS-hardened resolvers, DNSSEC and instant propagation. Free, forever.
Cloudflare's network. Host Tonic's control plane.
We ride on Cloudflare's global anycast footprint — the same infrastructure that resolves ~1.1 trillion DNS queries per day — and layer a clean, developer-first UI on top.
Anycast on 330+ cities
Every query is answered by the closest edge node on Cloudflare's global network — median lookups under 15ms worldwide.
Instant propagation
Record changes propagate globally in under 30 seconds. No more '48 hours to update' waiting rooms.
DDoS-hardened resolvers
Backed by the same infrastructure that mitigates the world's largest DDoS attacks — DNS stays up when the internet is on fire.
DNSSEC signed
One-click DNSSEC with automated key rotation. Protect visitors from cache poisoning and spoofing attacks.
Real-time analytics
See query volume, response codes, top record types and country-level traffic — refreshed every minute.
API + Terraform
Manage every zone and record via REST API, CLI or Terraform. GitOps your DNS the same way you ship code.
Every record type modern apps need.
GitOps-friendly DNS.
Manage every zone from your terminal, CI pipeline or Terraform state. No more copy-pasting records between control panels.
- REST API with per-zone tokens
- Terraform provider (hosttonic_dns_record)
- Bulk import from BIND / Route53 / Cloudflare
- Audit log with per-user attribution
- Webhooks on zone / record changes
resource "hosttonic_dns_record" "www" {
zone_id = var.zone_id
name = "www"
type = "CNAME"
value = "yourdomain.com"
proxied = true
}
$ terraform apply
+ hosttonic_dns_record.www created (12s)
✓ Propagated to 330 POPsDNS questions, plain answers.
Do I have to use Host Tonic hosting to use DNS?+
No. DNS management is free with every domain registered or transferred to Host Tonic, whether or not you host with us. Point records anywhere — GitHub Pages, Vercel, AWS, your own server.
How is this different from a plain 'DNS zone editor'?+
Our DNS runs on Cloudflare's anycast network with 330+ points of presence. Every query is answered by the closest edge, DDoS-scrubbed, and DNSSEC-validated. Legacy 'zone editors' typically use 2–4 authoritative servers in one region.
Does DNSSEC break anything?+
No. DNSSEC is fully transparent to visitors and resolvers that don't validate — but for those that do, it prevents cache poisoning, spoofing and man-in-the-middle attacks. We handle KSK/ZSK rotation automatically.
Can I use my own nameservers?+
Yes. If you prefer to run authoritative DNS elsewhere (Route53, NS1, or your own BIND), just update the nameserver records for your domain from the Host Tonic dashboard.
Are there query limits?+
No. DNS queries are unlimited on every plan — whether you're serving 1,000 or 100 million queries per month. We never rate-limit or throttle DNS.
Free DNS on every domain.
Register or transfer a domain to Host Tonic and get anycast DNS on Cloudflare's global network — instantly, at no extra cost.