InfraNestInfraNest

Domains & DNS

DNS management across every provider

Edit every zone from one editor, however many providers host them. Change a record once and it syncs live to Cloudflare, Route 53, Hetzner or your registrar — and you find out the moment something changes out of band, instead of when a site goes dark.

Free plan · No credit card · Connect a provider in 2 minutes

DNS records31 zones · 5 providers
RecordProviderStatus
A · www.acme.ioCloudflareSynced
MX · acme.ioAWS Route 53Synced
TXT · acme.io (SPF)IONOSDrifted
AAAA · app.northbeam.ioHetznerSynced
CNAME · blog.quiethours.comTransIPPending

One editor, whichever provider hosts the zone.

Works with your DNS providers

CloudflareAWS Route 53IONOSTransIPGoDaddyNamecheapSee all 42 →

One editor, every provider

Every zone across Cloudflare, AWS Route 53, Hetzner, TransIP, GoDaddy, IONOS and Namecheap — edited the same way, in one place. A field-aware form gives you exactly the right fields per record type and validates as you type, so nothing lands malformed at the provider.

  • Every provider’s zones imported the moment you connect a key
  • Validated edits that respect each provider’s record model
  • Point A/AAAA records at a Dynamic IP so they follow a changing address
All 214Drifted 3Pending 2
A · wwwacme.io · Cloudflare
MX · @acme.io · Route 53
TXT · @ (SPF)acme.io · IONOS
AAAA · appnorthbeam.io · Hetzner
CNAME · blogquiethours.com · TransIP

Drift detection, both ways

Edits you make push live to the provider, and anything changed outside InfraNest is pulled back and flagged as drift. You see exactly what was added, modified or removed — and decide whether to keep the provider’s version or reconcile back to yours.

  • Per-record sync status: synced, pending or drifted at a glance
  • Added, removed and modified records counted and diffed
  • An alert the moment a zone changes out of band
Drift · example.com3 changes outside InfraNest
Awww · 192.0.2.99 added at the providerReview →
TXTSPF record modified outside InfraNestReview →
CNAMEblog removed at the providerRestore →
SYNCEvery other record matches InfraNestIn sync

DNS Security Advisor

Every zone is checked for SPF, DKIM, DMARC and DNSSEC, with guided wizards that write the correct records for you instead of leaving you to hand-craft them. It knows your provider, so the fixes it offers are the ones that will actually apply.

  • SPF, DKIM and DMARC generated correctly, not by hand
  • DNSSEC signing and DS records handled per zone
  • Only surfaces the fixes that work at this provider
Email security wizard · acme.io
SPF · single record, all senders coveredValid
DKIM · selector published for your providerAdded
DMARC · policy raised to p=quarantineFixed
DNSSEC · signed and DS record publishedEnabled

Each fix written straight back to the zone.

Everything else it handles

The parts that are only interesting when you need them.

Templates & diff preview

Apply Google Workspace, Microsoft 365 and security presets in one click — with a diff preview before anything is written.

Bulk record editing

Change the same record across many zones in a single operation, instead of one at a time.

Per-record sync status

See synced, pending or drifted at a glance for every record, across every provider.

DNSSEC & CAA

Enable DNSSEC and manage CAA records without ever opening the registrar’s control panel.

Multi-provider zones

Keep the same zone consistent across more than one DNS provider, without copy-pasting between panels.

Record autocomplete

Smart suggestions for A/AAAA, MX, TXT and CAA records, so you type less and mistype nothing.

Dynamic IP tracking

Tick “Track with a Dynamic IP” and an A or AAAA record follows a changing address automatically — no cron jobs, no scripts.

Per-record comments

Note why a record exists, visible only inside InfraNest and never published to the zone.

See your own zones in about two minutes

Connect one provider with an API key. Nothing changes at the provider until you edit a record.

Managing DNS by hand vs InfraNest

The difference between DNS that merely works and DNS you can actually trust.

By hand

  • Log into a different panel for every provider
  • Copy-paste records between zones and hope they match
  • No idea when a record changed outside your tools
  • Hand-craft SPF, DKIM and DMARC and hope it’s right

With InfraNest

  • Every provider’s zones in one consistent editor
  • Templates apply the correct records in one click
  • Drift detection flags any out-of-band change both ways
  • Security Advisor and wizards fix email security for you

Pairs well with

Frequently asked

Which DNS providers sync with InfraNest?

Cloudflare, AWS Route 53, Hetzner, TransIP, GoDaddy, IONOS and Namecheap today, with more added regularly. Record changes push live with per-record sync status, and the integrations page lists exactly what each provider’s API supports.

Do I have to move my DNS to InfraNest?

No. InfraNest edits your zones where they already are — nameservers stay with your provider and nothing is migrated. You just get one editor over all of them instead of a panel each.

What is drift detection?

If a zone changes outside InfraNest, drift detection flags the added, removed and modified records and alerts you — then lets you keep the provider’s version or reconcile it back to yours.

Can I apply DNS templates?

Yes — one-click presets for Google Workspace, Microsoft 365 and security baselines, with a diff preview so you see every record that will be written before anything changes.

Which record types are supported?

A/AAAA, MX, TXT, CAA and more, with smart record autocomplete, DNSSEC management and the option to track A/AAAA records against a Dynamic IP.

Every record, in sync

Connect a provider and edit the zones you already have.

Start for free