# Service DNS Management https://docs.wisecp.com/es/service-dns-management Point a domain at the right nameservers and edit its glue, zone and DNSSEC records in one tab, so broken name resolution can be repaired without opening the registrar's own panel. ## Reaching the Screen Open **Orders › Services**, click the domain, then select the **DNS** tab: `{admin}/services/detail?id={service}&content=dns` The tab is rendered only for domain services, because the record that carries nameservers is the domain itself. Each inner section has its own address: `&dnsManagement=ns|child|zone|dnssec`. ## What Is on the Screen The tab is a single **DNS Management** card with up to four inner sections. Only the first is always there; the other three appear according to what the registrar module bound to the domain supports. - **Nameservers**: The four addresses stored for the domain. - **Child Nameservers**: Glue records built on the domain's own name. - **DNS Zone Records**: The A, MX, TXT and other zone records. - **DNSSEC Records**: Signing material published at the registry. ### Nameservers A band warns that a change can take up to 48 hours to spread. Four boxes follow, the first two required, and a malformed address turns its box red as you type. Below them, **Use provider's default nameservers** fills all four with the module's published set, or with the system-wide set when the module publishes fewer than two, and arrives ticked when the stored values already match. When neither the module nor the system-wide setting defines a set, ticking it empties all four boxes instead and the save is then refused, because the first two are required. The same gap keeps the orange band in the zone section on permanently for that domain. ### Child Nameservers **Hostname** takes only the host part and shows the domain as a fixed suffix, **IP Address** takes an IPv4 address, and the green **Add** button stays disabled until both are valid. The stored pairs are listed below with a pencil and a trash button per row; an empty list is replaced by "No data available yet.". It loads from the registrar when the section first opens. ### DNS Zone Records One band says zone changes usually spread within 15 minutes to 24 hours; a second, orange one appears when the stored nameservers are not the provider's default set, and warns without locking the table. Columns are **Type**, **Name**, **Value**, **TTL** and **Priority**, and the row menu holds **Edit** and **Delete**. The toolbar is the panel's standard table strip: a page-size selector, then the type filter starting on **All Types** and the green **Add Record** button, then a search box and, for staff holding the export privilege, a download menu. The zone is read once when the section opens, so filtering and search need no new request. ### DNSSEC Records The table lists **Digest**, **Key Tag**, **Digest Type** and **Algorithm**; a digest over 40 characters is shortened in the cell, in full in its tooltip. The toolbar is the same standard strip, carrying the green **Add DNSSEC Record** button next to the page-size selector, plus search and the download menu; each row ends with a red trash button. There is no edit action: a key is replaced by publishing new material and withdrawing the old. ## Fields - **Nameserver 1**: Required. Host-name format is checked in the browser and on the server. - **Nameserver 2**: Required; registries almost always demand two nameservers. - **Nameserver 3**: Optional. Left empty it is cleared from the stored set. - **Nameserver 4**: Optional, and behaves like Nameserver 3. - **Use provider's default nameservers**: Not stored on its own: it fills the four boxes; only those addresses are saved. With no default set defined anywhere it empties them instead. - **Hostname**: Required, host part only; the domain is appended automatically. - **IP Address**: Required, an IPv4 address such as `192.168.1.1`. - **Type**: Required; only the types the module reports. MX and SRV add priority, SRV also weight and port, CAA a flag and tag. - **Name**: Required, starts at `@`, which means the domain itself. - **Value**: Required. For SRV and CAA the extra boxes are folded into this value on send. - **TTL**: Required, starts at 1 hour; ten steps from 5 minutes to 1 day. - **Priority**: MX and SRV only, starts at 10. Lower values are preferred. - **Digest**: Required, copied from the provider that holds the signing key. - **Key Tag**: Required. The numeric tag of the key in the zone. - **Digest Type**: Required. Only the values the module declares are offered. - **Algorithm**: Required, same rule as Digest Type. All four are needed to save. ## Tasks ### Setting the domain's nameservers 1. In the **DNS** tab open the **Nameservers** section. 2. Fill **Nameserver 1** and **Nameserver 2**, plus the third and fourth if the provider gave you more, or tick **Use provider's default nameservers** to hand the domain back. 3. Click **Save Changes** at the bottom. The values are stored only after the registrar accepts the set, and a success message confirms it. ### Adding a child nameserver 1. Open the **Child Nameservers** section; the list is fetched from the registrar the first time. 2. Under **Add Child Nameserver**, fill **Hostname** and **IP Address**. 3. Click the green **Add** button beside them; the pair is registered at the provider and the row appears in the table below. ### Editing or deleting a child nameserver 1. Use the pencil button on the row; the **Edit Child Nameserver** window opens with the current values. 2. Change **Hostname** or **IP Address**, then click **Save Changes** in the window; the row is redrawn. 3. To remove the pair, use the trash button and confirm with **Yes, go ahead**. It is dropped at the provider, so anything still delegated to it stops resolving. ### Adding a zone record 1. Open the **DNS Zone Records** section, then click the green **Add Record** button in the toolbar above the table. 2. Pick **Type**, adjust **TTL**, fill **Name** and **Value**, then any extra box the type reveals. 3. Click **Add DNS Record** in the window footer; the table reloads from the registrar with the new row. ### Editing or deleting a zone record 1. Open the row menu at the end of the row and choose **Edit**. 2. Change what you need, then click **Save Changes** in the window footer; the button becomes available with your first edit and stays available even if you put the original value back. 3. To remove it instead, choose **Delete** and confirm with **Yes, go ahead**. An edit reloads the table with the provider's answer; a delete just removes the row. ### Publishing or withdrawing a DNSSEC record 1. Open the **DNSSEC Records** section, then click the green **Add DNSSEC Record** button in the toolbar. 2. Fill **Digest** and **Key Tag**, choose **Digest Type** and **Algorithm**, then click **Add DNSSEC Record** in the window footer. 3. To withdraw a key, use the red trash button on its row and confirm with **Yes, go ahead**. Both actions reach the registry at once; while no key is published the domain is unsigned. ## Things to Watch > **Nothing here is a draft** > > Every button here talks to the registrar the moment you press it, and a deleted glue, zone or DNSSEC record cannot be brought back. > **Zone editing assumes the provider's nameservers** > > When the nameservers are not the provider's default set the zone section only warns. Records are still written at the provider, but visitors are answered by whoever the domain is delegated to. > **A missing section is the module's answer** > > The last three sections appear only when the registrar module says it supports the matching calls. A missing one is a capability question, not a broken domain. ## Required Privileges Reading the sections needs `SERVICES_LOOK` or `SERVICES_OPERATION`. Every change on this tab needs `SERVICES_OPERATION`. ## Related Articles - [Service Detail Overview](https://docs.wisecp.com/en/service-detail-overview) - [Service WHOIS Records](https://docs.wisecp.com/en/service-whois-records) - [Domain Extensions and Pricing](https://docs.wisecp.com/en/domain-extensions-and-pricing)