In collaboration with Sectigo, an industry leader in SSL certificates and web security products, Openprovider introduces a Premium Global Anycast DNS service that will be the perfect complement to our current, free of charge, DNS offering. In the article below you can find a summary of the benefits of the service and a FAQ.
HOT TIP:
How to copy an existing Openprovider DNS zone to the Sectigo Premium DNS and update the domain
General:
Premium Global Anycast DNS Benefits
Does the Premium Global Anycast DNS service support DNSSEC?
Can I enable the Premium Global Anycast DNS service when transferring a domain to Openprovider or when trading a domain?
Can I transfer my Premium Global Anycast DNS subscription from one domain to another?
What DNS record types are supported by the Premium Global Anycast DNS service?
Can I use the Premium Global Anycast DNS service if my domain is not managed by Openprovider?
How do I delete the Premium Global Anycast DNS zone and prevent further billing?
I see now 2 zones in my overview. Is that ok or do I need to remove one?
Billing:
How does billing work for the Premium Global Anycast DNS service?
What happens to my subscription if I disable the Premium Global Anycast DNS service for a domain?
What happens to my subscription if I delete my domain, I transfer it out or my domain expires?
Pricing:
You can find the actual price for Premium Global Anycast DNS in your Control Panel under pricing.
API:
Is the Openprovider API compatible with Premium Global Anycast DNS?
How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?
Errors
Known errors and how to resolve them
Premium Global Anycast DNS Benefits
- Blazing Fast Resolution: The first part of a request to your website is typically a DNS lookup. Sectigo’s Premium Global Anycast DNS ensures that your customers are always connected to the closest server, resulting in lower latency and faster access times to your web properties.
- Global Presence: All your DNS zones are pushed to Sectigo’s DNS servers around the globe, ensuring an optimal user experience for your global customers.
- DDoS Protection: DNS is the first step in the journey to your website. Sectigo’s Premium DNS keeps your DNS zone protected from DDoS DNS attacks at all times.
- 99,99% Uptime Guarantee: Sectigo’s built-in smart routing and anycast capabilities ensure that your DNS zones are always online. Your websites will always be accessible regardless of regional disruptions.
- Near Real-Time Updates: Updates to your DNS records are carried out globally in near real-time.
- Easily Managed: Manage your DNS zones with a friendly and intuitive interface. The same interfaces and APIs currently used to manage DNS zones hosted at Openprovider’s nameservers can be used to manage Premium DNS zones.
- Competitive Pricing
How can I enable the Premium Global Anycast DNS service for a new domain registration using the Reseller Control Panel?
Enabling Premium Global Anycast DNS for a new domain registration is simple. Simply check the ‘Premium Anycast DNS by Sectigo’ box during the registration process. When you do that, the Sectigo nameserver group will be selected automatically in the ‘Nameserver settings’ section.
**NOTE:
The Premium Global Anycast DNS by Sectigo are separate nameservers from the free Nameservers of Openprovider.
Activating these nameservers means a new, empty zone will be created on the Sectigo servers, and any records you want to use have to be created in the new zone of Sectigo! If you already have a standard (active) Openprovider DNS zone for this domain name, we recommend using the flow described below.
How can I enable the Premium Global Anycast DNS service for an existing domain using the Reseller Control Panel?
You can achieve this in 2 different ways.
OPTION 1
Please use the first option when the domain is currently actively running on the Openprovider DNS and you would like to create a matching zone on the Sectigo DNS service.
- Create the Premium DNS zone for that domain directly in the ‘DNS management’ area.
In case a standard zone for this domain already exists in your account, the system will give you the option to copy the records the records to the new zone.
We advise to wait until the zone is active (can be found / pinged via online tools) , before you update the domain to the Sectigo nameservers via the detailpage of the domain.
(Detailpage = page with all the details of the domainname itself found via Domain Overview)
Click on "edit details" on the domain detail page and scroll down to the nameserver section.
The Sectigo nameservers will be shown in the dropdown, once a premium zone exists for the domain.
OPTION 2
The following option can be used when a domain is not currently actively using the Openprovider nameservers. Because the update of the NS will be triggered before the zone is created and resolves, which might cause downtime on the domain itself.
- Edit the domain details via the domain detailpage, check the ‘Premium DNS by Sectigo’ box in the domain details view and save your changes.
This will automatically create a new Premium Global Anycast DNS zone for that domain and will select the Sectigo nameserver group in the ‘Nameserver Settings’ section.
You will also see the option to select a template for the new zone that you will be creating.
Once saved, the domain is updated and the zone is created
Please go to DNS Management > DNS Zones overview.
From here you can find the zone. You will see "provider" = Sectigo.
Does the Premium Global Anycast DNS service support DNSSEC?
Yes, DNSSEC is fully supported by the Premium Global Anycast DNS service.
Can I enable the Premium Global Anycast DNS service when transferring a domain to Openprovider or when trading a domain?
No, the Premium Global Anycast DNS service is not available in these cases just yet, but we are planning to add support for them in the near future. Once a domain has been successfully transferred to Openprovider, Premium Global Anycast DNS can be enabled via a domain update action.
Can I transfer my Premium Global Anycast DNS subscription from one domain to another?
No, the Premium Global Anycast DNS service is tied to a specific domain and cannot be transferred between domains.
How do I manage the Premium Global Anycast DNS service from the Reseller Control Panel?
You can manage your premium DNS zone in the same way you manage your standard DNS zones, i.e. from the domain details page or from the ‘DNS Management’ section.
You can also manage your Premium DNS zone using the "Single domain DNS Panel" (dnspanel.io).
How do I disable the Premium Global Anycast DNS service for a given domain using the Reseller Control Panel?
Please follow these steps:
- In the domain details view, select the edit option and disable Premium Anycast DNS by Sectigo by toggling the button.
When Premium Anycast DNS by Sectigo is enabled:
When Premium Anycast DNS by Sectigo is disabled:
After toggling the button, nameserver group will be automatically switched to Openprovider nameservers (nameservers won't be changed until you click on Save changes). Change the nameservers to the ones that correspond to the DNS service you will be using after cancelling the Premium DNS service. If you wish to use Openprovider’s standard DNS service, just select the Openprovider nameserver group. If you plan on using a third party provider, please select the corresponding nameserver group or choose No nameserver group from the dropdown and manually enter the corresponding nameservers.
In this case, please ensure that the new DNS zone is available and zone records are copied from Sectigo zone before performing the migration. - Save your changes.
- Wait for 24-48 hours to ensure that the changes are propagated globally.
- Go back to the domain details view, edit the domain and uncheck the ‘Premium DNS by Sectigo’ box.
- Save your changes.
- In order to cancel the subscription itself, delete the zone via the domain management menu.
What DNS record types are supported by the Premium Global Anycast DNS service?
The Premium DNS service supports for 95% the same record types as our standard DNS service.
Unsupported records:
The TLSA and SPF type (record type SPF is deprecated) records that are supported by our standard DNS service but not by the Premium DNS service. If you are currently using a TLSA record for one of your domains and wish to enable the Premium DNS service for that domain, please ensure you remove the TLSA record first or get in touch with our support team. If you have a DNS record of type 'SPF', please convert it to a TXT record before importing/copying records to the Premium DNS service.
Not Supported
Supported
You cannot have two MX records that are the same with different priorities as that is redundant.
Not Supported
| Priority | Content |
| 30 | mail.domain.tld. |
| 10 | mail.domain.tld. |
So for example, you could do:
Supported
| Priority | Content |
| 30 | mail.domain.tld. |
| 10 | mail1.domain.tld. |
Because that’s saying if mail1 fails then fallback to mail. Otherwise, it’s the same thing just different priorities so it becomes superfluous.
Can I use the Premium Global Anycast DNS service if my domain is not managed by Openprovider?
Yes, you can create a Premium DNS zone for a domain even if that domain is currently not managed by Openprovider.
How do I delete my Premium DNS zone and prevent further billing?
There are 2 options to delete your Sectigo Premium DNS zone.
- You can disable the auto renewal (Set to "on" by default, this can not be changed at this moment)
- You can delete the zone by clicking on the red bin icon. Please note, the zone will be deleted immediately and the zone will stop resolving.
As long as the zone exists, the billing will take place every year.
I now see 2 zones in my overview. Is this alright or do I need to remove one?
It can happen that you find 2 zones for the same domain in your overview. In the column "DNS Provider" you can see on which platform this zone is managed (Openprovider or Sectigo)
It is not a problem that there are 2 zones for the same domain, the domain itself will only be connected to 1 zone. The other will not be used.
We advise to keep the Openprovider zone just after the update. In case something goes wrong, you can directly switch back to the Openprovider zone.
Deleting the zone afterwards is up to the reseller itself.
You could decide to delete the zone later, so there is no confusion for yourself or your colleagues in which DNS zone the record changes should take place.
Removing the not-used zone could help in keeping the overview clean and organised.
But keeping the zone might be interesting if you ever want to switch back or would like to know the previous used records.
Please note that both zones will be operating on completely different platforms.
So changes and updates which are made in the Sectigo zone on the Sectigo platform will NOT be automatically synchronised in an (old) Openprovider zone and so the same goes for the other way around.
Billing
How does billing work for the Premium Global Anycast DNS service?
The Premium DNS service is a yearly subscription service, and it is automatically renewed every year unless the Premium DNS zone is deleted or the auto renewal is disabled.
You can find the renewal date of the zone in the DNS management --> Zone overview.
What happens to my subscription if I delete the Premium Global Anycast DNS service for a domain?
If you delete a Premium DNS zone, the subscription to that zone will be cancelled immediately and you will not be billed for that zone anymore in the future.
Note that if you delete your Premium DNS zone before the current billing cycle has come to an end, you will not get a refund for the rest of the 1-year period you paid for as mentioned in the signed Terms and Conditions.
Click here to read how to delete your Premium DNS zone.
What happens to my subscription if I delete my domain, I transfer it out or my domain expires?
Your Premium DNS zone is not deleted automatically if you transfer your domain out of Openprovider, when you delete your domain or when the domain expires.
It is important that if you want to stop the Premium DNS service, you have to explicitly delete that zone from the Openprovider platform to stop the subscription or disable the auto renewal.
As long as the zone is present in the control panel, the subscription is active and will be invoiced on a yearly basis. There will be no refund provided, also not when it was not actively used or connected to a non active domain, as mentioned in the signed Terms and Conditions.
Click here to read how to delete your Premium DNS zone.
API
Is the Openprovider API compatible with Premium Global Anycast DNS?
Yes, the Openprovider DNS API is fully compatible with the Premium DNS service and can be used to create, manage and delete your Premium DNS zones and records programmatically, just as you do with your standard DNS zones. Please refer to our API documentation for more details on how to manage this service.
How can I enable the Premium Global Anycast DNS service when registering a new domain programmatically using the API?
Just add the ‘isSectigoDnsEnabled’ => 1 parameter to your createDomainRequest. If you are using the PHP library for our XML API:
$request = new OP_Request;
$request->setCommand('createDomainRequest')
->setAuth(array('username' => '***', 'password' => '***'))
->setArgs(array(
'ownerHandle' => 'AB123456-NL',
'adminHandle' => 'AB123456-NL',
'techHandle' => 'AB123456-NL',
'domain' => array(
'name' => 'example',
'extension' => 'tld'
),
'period' => '1',
'nameServers' => [
0 => ['name' => 'NS1.sectigoweb.com'],
1 => ['name' => 'NS2.sectigoweb.com'],
2 => ['name' => 'NS3.sectigoweb.com'],
3 => ['name' => 'NS4.sectigoweb.com'],
],
'isSectigoDnsEnabled' => 1,
));
How can I enable the Premium Global Anycast DNS service for an existing domain programmatically using the API?
Add the ‘isSectigoDnsEnabled’ => 1 parameter to your modifyDomainRequest. PHP example:
$request = new OP_Request;
$request->setCommand('modifyDomainRequest')
->setAuth(array('username' => '***', 'password' => '***'))
->setArgs(array(
'domain' => array(
'name' => 'example',
'extension' => 'tld'
),
'isSectigoDnsEnabled' => 1,
));
This will enable Premium Global Anycast DNS service for the domain and will create a default Sectigo zone (with just NS and SOA records). To change nameservers to Sectigo ones, it will need to be another modifyDomainRequest after populating the Sectigo DNS zone. Please refer to How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?
How can I disable the Premium Global Anycast DNS service for one of my domains programmatically using the API?
Add the ‘isSectigoDnsEnabled’ => 0 parameter to your modifyDomainRequest. PHP example:
$request = new OP_Request;
$request->setCommand('modifyDomainRequest')
->setAuth(array('username' => '***', 'password' => '***'))
->setArgs(array(
'domain' => array(
'name' => 'example',
'extension' => 'tld'
),
'isSectigoDnsEnabled' => 0,
));
This will disable the Premium Global Anycast DNS service for the domain and delete the Sectigo DNS zone. Please note that this won't change the nameservers of the domain. To change nameservers while disabling the Premium Global Anycast DNS service, you will need to specify new nameservers in the modifyDomainRequest along with 'isSectigoDnsEnabled' => 0.
Please note that the 'isSectigoDnsEnabled' parameter must only be used to enable or disable the Premium DNS service. It must be omitted from the API calls with which you don’t intend to toggle the Premium DNS service.
How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?
Yes, You can search for the zone matching a certain name pattern and provider with the query parameters : `name_pattern=example.domain&provider=openprovider`
So the full command would look like :
curl -X GET "https://api.openprovider.eu/v1beta/dns/zones?name_pattern=example.domain&provider=openprovider" \
-H 'Authorization: Bearer <API TOKEN>'
response will have the target records.
Then add the desired records to the zone :
curl -X PUT "https://api.openprovider.eu/v1beta/dns/zones/example.domain" \
-H 'Authorization: Bearer <API TOKEN> ' \
-H 'Content-Type: application/json' \
-d '
{
"id": 12275390,
"name": "example.domain"
"provider": "sectigo",
"records": {
"add": [
{
"name": "",
"ttl": "900",
"value": "127.0.0.2",
"type": "A"
}
]
}
}
Errors (section under construction)
Known errors and how to resolve them
Error 869 - An unknown Sectigo DNS error has occurred; please contact Openprovider.
This error can appear when you are creating a zone that contains an invalid record. For example, this could be an MX record with an IP address or the DNS zone containing a record with type SPF (record type SPF is deprecated. See this section). Please check and adjust your zone and try it again.
Error 866 - This type of record is not supported by Sectigo yet.
This error can appear when you are creating a zone with unsupported records. An example is TSLA, which is a record type that is not supported.
Error 864 - This zone is already active on Sectigo side.
Please contact Support.
Cannot save zone record: Duplicate record
This error can appear when you have a duplicate record in the zone. Please review this section and check if you perhaps have 2 MX records in your zone with identical content.
