enum DNS.
Free for every account.
Authoritative DNS for the domains you own. Zones, records, DNSSEC and BIND import, through the API and enumctl.
Self-service today: sign up and create your first zone.
What is enum DNS?
The short answer.
enum DNS is authoritative DNS hosting for the domains you own, run by enum GmbH on nameservers it operates in the EU. It is free forever for every enum account: no fee per zone, no price per query, and as many zones as you need. It supports A, AAAA, CNAME, MX, TXT, NS, SRV and CAA records, a CNAME at the zone apex, DNSSEC, BIND zone file import and export, and ACME DNS-01 certificates, all through the enum API and enumctl.
Zones and records
A, AAAA, CNAME, MX, TXT, NS, SRV and CAA, with sensible default TTLs.
CNAME at the apex
Point example.com at another hostname. enum serves the target's addresses.
DNSSEC
Turn on signing for an active zone and publish the DS records at your registrar.
Free forever.
No query bill.
No fee per zone and no price per query. DNS is part of every enum account.
From your terminal.
Or the API.
Create a zone, point your registrar at the nameservers enum assigns and manage records with one command each.
$ enumctl dns zones create example.com ✓ Zone example.com. created (dnszone-01m3pq0gpqe2x9v0dvw8css63s). ℹ Apex NS/SOA are already live on enum. Point your registrar nameservers to: curie.ns.enum.cloud planck.ns.enum.cloud $ enumctl dns records create example.com CNAME target.example.net. ✓ Record set example.com. CNAME created.
Technical details.
What a zone supports.
Records, TTLs, limits and tooling as they work today. The full reference is in the docs.
| Feature | enum DNS |
|---|---|
| Price | Free forever. No fee per zone, no price per query, as many zones as you need. |
| Record types | A, AAAA, CNAME, MX, TXT, NS, SRV, CAA |
| CNAME at the apex | Flattened to the target's A and AAAA addresses and signed like any other record. Can sit next to MX, TXT and CAA at the apex. |
| Default TTLs | 300 s for A and AAAA, 86400 s for NS, 3600 s for all other types |
| TTL range | 60 s to 86400 s, NS 3600 s to 604800 s |
| DNSSEC | Online signing managed by enum. You get DS records or the DNSKEY to publish at your registrar. |
| Zone files | BIND import in merge, replace or prune mode, with a dry run first. Export back to a BIND zone file. |
| Zones | Registrable domains such as example.com or example.co.uk. Subdomains are records in the parent zone, or delegated with NS records. |
| Ownership check | A zone goes live once the parent zone delegates the domain to the nameserver pair assigned to your project. |
| Nameservers | One pair per project, named after European scientists, for example curie.ns.enum.cloud and planck.ns.enum.cloud. Operated by enum in the EU. Anycast is on the roadmap, not live yet. |
| Management | The enum API, with Go and TypeScript clients, and enumctl. A Terraform provider is on the roadmap. |
| Certificates | ACME DNS-01 with cert-manager, wildcards included |
| Deletion protection | On by default for every new zone |
enum manages the SOA and the apex NS records. Everything else in the zone is yours.
Questions.
Answered.
Is enum DNS free?
Yes. There is no fee per zone and no price per query. DNS is part of every enum account.
Why is enum DNS free?
Because DNS is the backbone of the internet, and we think it should not cost money per zone or per lookup. Moving your authoritative nameservers is also the cheapest step towards European infrastructure, for a company or a side project. Free forever is the product, not a launch promotion.
Who can use it today?
Anyone with an enum account. enum DNS is generally available, registration is open and DNS is self-service.
How do I point my domain at enum?
Create a zone with enumctl or the API. enum assigns the zone a pair of nameservers, for example curie.ns.enum.cloud and planck.ns.enum.cloud. Set those at your registrar, and the zone goes live once enum sees the delegation. Records you add before that are published the moment it does. To check right away, run enumctl dns zones verify.
How do I move my zones from another DNS provider?
Export a BIND zone file from your current provider, create the zone on enum and import the file, with a dry run first to preview the changes. enum ignores the SOA and apex NS in the file and manages them itself. Then switch the nameservers at your registrar. Your records go live as soon as enum sees the new delegation. You can export a zone back to a BIND zone file at any time.
Which record types are supported?
A, AAAA, CNAME, MX, TXT, NS, SRV and CAA. A CNAME is allowed at the zone apex and is flattened to the target's A and AAAA addresses.
Does enum DNS support DNSSEC?
Yes. Enable signing on an active zone and publish the DS records or DNSKEY that enum returns at your registrar.
Can I issue TLS certificates for zones on enum?
Yes. Issue certificates, including wildcards, with cert-manager and ACME DNS-01 validation.
Can I limit an API key to one zone?
Not today. An API key belongs to one project and can change every zone in that project. To keep a key away from your other zones, put the zone it needs in a project of its own, for example a separate domain that only holds the targets of your _acme-challenge CNAMEs.
Does enum DNS use Anycast?
Not yet. Today enum DNS answers from nameservers enum operates in the EU. Anycast DNS is on the roadmap: once the edge network launches, queries will be answered from the location closest to the resolver.
Is enum DNS subject to the US CLOUD Act?
No. enum GmbH is a German company with no US parent and no US entity in its structure. enum DNS runs on nameservers enum operates in the EU.
Can I manage enum DNS with Terraform?
Not yet. A Terraform provider is on the roadmap. Today you manage zones and records with the enum API, its Go and TypeScript clients, or enumctl.
Your domains.
Free on enum.
Sign up, create a zone and point your registrar at enum. Your records go live as soon as the delegation is in place.