The DNS editor that
actually edits.
Every other DNS console treats zone management like compliance paperwork. Relays treats it like code.
Thirteen types.
One keystroke each.
A · AAAA · CNAME · MX · TXT · NS · SOA · SRV · CAA · PTR · DS · DNSKEY · SSHFP
Paste a zone file.
Done.
Copy from BIND, Route53, Cloudflare, GoDaddy — paste into Relays. The importer tolerates typos, comments, and half-broken SOA lines. Every record goes through the same validator as the TAB editor.
Three seconds.
Everywhere.
Relays streams NOTIFY packets over a global mesh the instant a record changes. No waiting for secondaries to poll. No 48-hour TTL myths.
| Resolver | Operator | Region | Answer | Match |
|---|---|---|---|---|
| 1.1.1.1 | Cloudflare | IAD | — | … |
| 8.8.8.8 | LAX | — | … | |
| 9.9.9.9 | Quad9 | AMS | — | … |
| 208.67.222.222 | OpenDNS | FRA | — | … |
| 64.6.64.6 | Verisign | NRT | — | … |
| 149.112.121.10 | CIRA | ORD | — | … |
| 94.140.14.14 | AdGuard | SIN | — | … |
| 76.76.2.0 | ControlD | SYD | — | … |
Every answer
signed.
DNSSEC is on by default for every zone. KSK/ZSK roll automatically. DS records are generated and — if you use Relays as your registrar — published to the parent without a click.
- • ECDSA P-256 (default) / RSA 2048
- • NSEC3 with opt-out
- • Automatic KSK rollover · double-signature
- • Parent DS publish via Relays registrar
- • Full dnsviz.net chain-of-trust validation
Geo-aware.
Failover-aware.
Declare pools, health-check them, route by country or continent. If the health check goes red, Relays withdraws the record within one TTL — automatically.
Your zone file
is a first-class artifact.
Download as BIND, JSON, Terraform, Pulumi, or Kubernetes CR. Versioned in git. Diffable. Revert to any point in history with a single click.
Every action.
An API call.
142 REST endpoints. Idempotency keys on writes. OpenAPI 3.1 published every release.