deSEC
Free, security-focused DNS hosting service running on open-source software with full API support, free for everyone.
- Card required
- No
deSEC scores 7.2/10 for free value in Domains. The main constraint: Free DNS hosting for everyone with API access and DNSSEC; open-source software, supported by SSE.
Free value score
7.2 / 10Show the math
Key metrics
What you get
Verified free DNS hosting for everyone
Full API support and DNSSEC
Runs on open-source software
Security-focused, supported by SSE
Gotchas
- DNS hosting only — no domain registration
deSEC provides DNS hosting exclusively; you must bring your own domain registered elsewhere.
- API: 10/s, 50/min DNS reads
DNS read operations (fetching an RRset) are capped at 10 requests/second and 50 requests/minute per account.
- API: 10/s, 300/min, 1000/h domain writes
Domain creation/deletion and zonefile exports are rate-limited to 10/s, 300/min, and 1000/h per account.
- Per-domain RRset writes: 2/s, 15/min, 100/h, 300/day
RRset creation, deletion, or modification on a single domain is limited to 2/s, 15/min, 100/h, and 300/day; bulk requests can help.
- Global user cap: 2000/day
Any authenticated API activity is subject to an overall ceiling of 2000 requests per day per account.
- Account management: 3/min active, 50/min passive
Account operations with external effects (e.g. sending email) are limited to 3/min; internal operations to 50/min and 600/h.
- dynDNS updates: 2 per 2 minutes per domain
dynDNS (dedyn.io) updates are rate-limited to 2 requests per 2-minute window per domain.
- Control panel requires JavaScript
The web-based DNS management control panel will not function without JavaScript enabled in the browser.
Sources
-
"deSEC is a free DNS hosting service, designed with security in mind. Running on open-source software and supported by SSE, deSEC is free for everyone to use."
https://desec.io/ -
"dns_api_per_domain_expensive | 2/s 15/min 100/h 300/day | RRset creation/deletion/modification (per domain). ... user | 2000/day | Any activity of a) authenticated users, b) unauthenticated users (by IP)"
https://desec.readthedocs.io/en/latest/rate-limits.html -
"Note also that the default domain limit of newly created accounts is 1; registering another name therefore would require to first get in touch with support to get that limit increased."
https://talk.desec.io/t/number-of-domains-per-account/1204 -
"deSEC uses an Anycast network with multiple frontend servers around the world in addition to master servers."
https://talk.desec.io/t/hosted-in-the-us/1437
