sslip.io
Free public wildcard DNS that resolves any hostname with an embedded IP address straight to that IP, no signup required.
- Card required
- No
sslip.io scores 4/10 for free value in Domains. The main constraint: Unlimited resolution of any IPv4/IPv6-embedded hostname (e.g. 192-168-0-1.sslip.io) at no cost, with no account and no card; optional self-hosted branded subdomains via NS delegation.
Free value score
4.0 / 10Show the math
Key metrics
What you get
No signup, no card, no config — any IP-embedded hostname resolves instantly
Supports IPv4 and IPv6, with dot or dash separators
Issue valid Let's Encrypt / ZeroSSL TLS certs per hostname (HTTP-01) or wildcard (DNS-01)
Brand your own subdomain via NS delegation, or self-host the open-source Go DNS server
Gotchas
- Embedded-IP hostnames only
Nameservers are non-recursive and only resolve hostnames that embed a valid IPv4/IPv6 address (plus a few status/TXT records); they will not resolve arbitrary domains and must never be set as a machine's general resolver.
- No managed custom DNS records
A/AAAA records are derived automatically from the hostname; MX/SOA/PTR are hard-coded and there are no SRV records. You cannot create or manage arbitrary record values without self-hosting your own delegated nameservers.
- Shared TLS certificate rate limits
TLS certificates are issued by external CAs (Let's Encrypt/ZeroSSL) against the shared sslip.io/nip.io domain, so CA per-domain rate limits are pooled across all users; if one domain is rate-limited you must switch to the other (sslip.io <-> nip.io).
- Abuse blocklist and takedowns
An automated blocklist filters phishing/abuse strings and CIDRs, and hostnames named in takedown notices return a 'site blocked' warning record instead of the embedded IP.
- Best-effort, no SLA
Free volunteer-run service (~10k queries/sec across a handful of nameservers) with no uptime guarantee; community reports warn the sibling nip.io domain could disappear, so production reliance is risky.
- Experimental features unstable
Helper features such as external-IP TXT lookup (ip.nip.io) and version/metrics TXT records are explicitly experimental and may change or be removed.
Sources
-
"nip.io and sslip.io have been in operation for over ten years. We have become so popular that our servers receive over 10k queries every second, so mainstream that Google, IBM, AMD, Cisco, Oracle, and many more refer to us in their documentation!"
https://sslip.io/ -
""Queries: 58116774 (4169.1/s)""
https://sslip.io/experimental.html -
"Up to 50 certificates can be issued per registered domain (or IPv4 address, or IPv6 /64 range) every 7 days."
https://letsencrypt.org/docs/rate-limits/ -
"Golang-based DNS server which maps DNS records with embedded IP addresses to those addresses. ... "stargazers_count": 1052"
https://github.com/cunnie/sslip.io