Premium DNS

DNS that's up
lets you down.

DNSSEC-signed authoritative DNS on four globally distributed nameservers, with health-checked failover and 60-second TTLs. Works with any registrar. US$11/month per zone.

Add Premium DNS See pricing
Works with any registrar DNSSEC-signed zones 1M queries / zone Active in minutes
kapsulecloud.com · Premium DNS
Active

4

Nameservers

3

Continents

60s

Min TTL

Nameserver cluster · AXFR synced

ns1
Germany
ns2
Finland
ns3
United States
ns4
Singapore

DNSSEC signed · answers verified in transit

4

Global nameservers

3

Continents covered

60s

Minimum TTL

1M

Queries/zone free

Global nameservers

DNSSEC-signed DNS on four globally distributed nameservers

Premium DNS answers from four nameservers in Falkenstein, Helsinki, Ashburn, and Singapore, across three continents. Every zone is replicated to all four, so visitors keep resolving even if one nameserver goes offline.

  • Four nameservers across three continents
  • Falkenstein, Helsinki, Ashburn, and Singapore
  • Full AXFR replication to every nameserver
  • No single point of failure

Nameserver cluster

AXFR synced
ns1Germany
Primary
ns2Finland
Secondary
ns3United States
Secondary
ns4Singapore
Secondary

Zone security status

Protected
Health-checked failover
2 origins configured
Primary origin
Healthy
Backup origin
Standby
Health check interval
Every 60s, passing
Failover delay
60s
Automatic reroute
Enabled

Health-checked failover

Automatic failover keeps a dead origin out of your DNS

Configure health checks on your records and Premium DNS watches each origin. When a check fails, the unhealthy IP is removed from responses and the backup is served automatically. Visitors never resolve to a dead endpoint.

  • Native health-checked DNS failover
  • Unhealthy origins removed automatically
  • Health checks configurable via dashboard
  • 60-second TTL for fast failover

DNSSEC

Every zone signed with DNSSEC

Premium DNS signs your zone with DNSSEC (ECDSA P-256) so resolvers can cryptographically verify each answer. DS records are generated ready for your registrar, and the nameservers run on DDoS-protected infrastructure.

  • DNSSEC signing (ECDSA P-256)
  • DS records ready for your registrar
  • Tamper-evident DNS responses
  • Runs on DDoS-protected infrastructure

DNSSEC signature

Algorithm
ECDSA P-256 (alg 13)
DNSKEY
Published
RRSIG
On every record
DS record
Ready for registrar

Signed zone, tamper-evident answers

Simple pricing

US$11/month per zone.

Per DNS zone (one domain), per month. 1M queries included. Overages $0.0001/query above 1M. No setup fee. No contract.

Premium DNS

US$11/month per zone

Annual billing available: contact us for volume pricing on multiple zones.

Four global nameservers (DNSSEC-signed)
DNSSEC signing (ECDSA P-256)
Health-checked DNS failover
AXFR replication across all nameservers
Low TTL support (60 seconds)
1M DNS queries/month included
Additional queries: $0.40/M
Runs on DDoS-protected infrastructure
Works with any registrar
DS records ready for your registrar
Unlimited DNS records
KPanel zone management
Add Premium DNS

Works with any domain registrar. Active within minutes.

FAQ

Frequently asked questions

More from Kapsule Protect

The rest of the stack.

See all five

Off-site Backup

Daily encrypted, separate infra

Open

SSL Certificates

Free DV, OV, EV, Wildcard, Multi-Domain

Open

Kapsule Care

Monthly WordPress maintenance

Open

Pro Services

Fixed-price done-for-you work

Open

Your domain deserves resilient, signed DNS.

DNSSEC signing, four globally distributed nameservers, and health-checked failover for US$11/month. Active within minutes. No registrar change required.

Add Premium DNSTalk to Sales