DNS/Portal: Difference between revisions
No edit summary |
mw push |
||
| Line 8: | Line 8: | ||
This page explains how the Portal provides DNS, what you can manage, and where to find step-by-step instructions. | This page explains how the Portal provides DNS, what you can manage, and where to find step-by-step instructions. | ||
== What the Portal | == What the Portal provides == | ||
* User-managed subdomains under ''ampr.org'' (typically your callsign). | * User-managed subdomains under ''ampr.org'' (typically your callsign). | ||
* A web interface for creating and managing DNS resource records. | * A web interface for creating and managing DNS resource records. | ||
| Line 19: | Line 19: | ||
* Requests that do not match a verified callsign require staff review. | * Requests that do not match a verified callsign require staff review. | ||
== What | == What you can manage == | ||
* Subdomains under ''ampr.org'' (for example ''ki5qkx.ampr.org''). | * Subdomains under ''ampr.org'' (for example ''ki5qkx.ampr.org''). | ||
* Records beneath your subdomain (for example ''houston.ki5qkx.ampr.org''). | * Records beneath your subdomain (for example ''houston.ki5qkx.ampr.org''). | ||
* Delegation via ''NS'' records | * Delegation via ''NS'' records | ||
== Supported | == Supported record types == | ||
Common Types: | Common Types: | ||
* A | * A | ||
| Line 42: | Line 42: | ||
* DS | * DS | ||
== Update | == Update schedule == | ||
DNS changes are exported on an hourly schedule. Expect up to about one hour for updates to reach the authoritative servers, plus any resolver caching based on TTL. | DNS changes are exported on an hourly schedule. Expect up to about one hour for updates to reach the authoritative servers, plus any resolver caching based on TTL. | ||
== DNSSEC | == DNSSEC status == | ||
DNSSEC is a zone-wide feature that must be enabled at the ''ampr.org'' apex. It is not something individual users can turn on for their subdomains in the Portal. Currently, DNSSEC is not enabled for ''ampr.org''. We expect to implement it in the future. When it is enabled, records managed directly in the Portal will automatically benefit from DNSSEC at the parent zone. | DNSSEC is a zone-wide feature that must be enabled at the ''ampr.org'' apex. It is not something individual users can turn on for their subdomains in the Portal. Currently, DNSSEC is not enabled for ''ampr.org''. We expect to implement it in the future. When it is enabled, records managed directly in the Portal will automatically benefit from DNSSEC at the parent zone. | ||
== How- | == How-to guides == | ||
=== DNS in the Portal === | === DNS in the Portal === | ||
| Line 55: | Line 55: | ||
* [[DNS/Portal/Delegations|Delegate your subdomain to your own name servers]] | * [[DNS/Portal/Delegations|Delegate your subdomain to your own name servers]] | ||
=== Running a DNS | === Running a DNS server === | ||
* [[DNS/Setup/OpenBSD_Resolver|Setup a DNS server on OpenBSD]] | * [[DNS/Setup/OpenBSD_Resolver|Setup a DNS server on OpenBSD]] | ||
Revision as of 23:20, 28 February 2026
← Back to DNS
This page explains how the Portal provides DNS, what you can manage, and where to find step-by-step instructions.
What the Portal provides
- User-managed subdomains under ampr.org (typically your callsign).
- A web interface for creating and managing DNS resource records.
- Optional delegation to your own authoritative name servers.
- Hourly export of DNS data to the authoritative servers.
Requirements
- You must have a Portal account.
- Callsign-based subdomains require a verified amateur radio callsign.
- Requests that do not match a verified callsign require staff review.
What you can manage
- Subdomains under ampr.org (for example ki5qkx.ampr.org).
- Records beneath your subdomain (for example houston.ki5qkx.ampr.org).
- Delegation via NS records
Supported record types
Common Types:
- A
- AAAA
- CNAME
- MX
- TXT
- SRV
Advanced Types:
- CAA
- LOC
- RP
- PTR
- NS
- DNSKEY
- DS
Update schedule
DNS changes are exported on an hourly schedule. Expect up to about one hour for updates to reach the authoritative servers, plus any resolver caching based on TTL.
DNSSEC status
DNSSEC is a zone-wide feature that must be enabled at the ampr.org apex. It is not something individual users can turn on for their subdomains in the Portal. Currently, DNSSEC is not enabled for ampr.org. We expect to implement it in the future. When it is enabled, records managed directly in the Portal will automatically benefit from DNSSEC at the parent zone.
How-to guides
DNS in the Portal
- Claim your callsign subdomain
- Add DNS records to your subdomain
- Delegate your subdomain to your own name servers