Premium Global Anycast DNS Service


In collaboration with Sectigo, an industry leader in SSL certificates and web security products, Openprovider introduces a Premium Global Anycast DNS service that will be the perfect complement to our current, free of charge, DNS offering. In the article below you can find a summary of the benefits of the service and a FAQ.


HOT TIP:
How to copy an existing Openprovider DNS zone to the Sectigo Premium DNS and update the domain


General:

Premium Global Anycast DNS Benefits

How can I enable the Premium Global Anycast DNS service for a new domain registration using the Reseller Control Panel?

How can I enable the Premium Global Anycast DNS service for an existing domain using the Reseller Control Panel?

Does the Premium Global Anycast DNS service support DNSSEC?
Can I enable the Premium Global Anycast DNS service when transferring a domain to Openprovider or when trading a domain?

Can I transfer my Premium Global Anycast DNS subscription from one domain to another?

How do I disable the Premium Global Anycast DNS service for a given domain using the Reseller Control Panel?

What DNS record types are supported by the Premium Global Anycast DNS service?

Can I use the Premium Global Anycast DNS service if my domain is not managed by Openprovider?

How do I delete the Premium Global Anycast DNS zone and prevent further billing?

I see now 2 zones in my overview. Is that ok or do I need to remove one?


Billing:

How does billing work for the Premium Global Anycast DNS service?

What happens to my subscription if I disable the Premium Global Anycast DNS service for a domain?

What happens to my subscription if I delete my domain, I transfer it out or my domain expires?

 

Pricing:

You can find the actual price for Premium Global Anycast DNS in your Control Panel under pricing.

 

API:

Is the Openprovider API compatible with Premium Global Anycast DNS?

How can I enable the Premium Global Anycast DNS service when registering a new domain programmatically using the API?

How can I enable the Premium Global Anycast DNS service for an existing domain programmatically using the API?

How can I disable the Premium Global Anycast DNS service for one of my domains programmatically using the API?

How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?

Can the Premium Global Anycast DNS service also be used via Plugins, like WHMCS, Blesta or Hostbill?


Errors
Known errors and how to resolve them

 

Premium Global Anycast DNS Benefits

    • Blazing Fast Resolution: The first part of a request to your website is typically a DNS lookup. Sectigo’s Premium Global Anycast DNS ensures that your customers are always connected to the closest server, resulting in lower latency and faster access times to your web properties.
    • Global Presence: All your DNS zones are pushed to Sectigo’s DNS servers around the globe, ensuring an optimal user experience for your global customers.
    • DDoS Protection: DNS is the first step in the journey to your website. Sectigo’s Premium DNS keeps your DNS zone protected from DDoS DNS attacks at all times.
    • 99,99% Uptime Guarantee: Sectigo’s built-in smart routing and anycast capabilities ensure that your DNS zones are always online. Your websites will always be accessible regardless of regional disruptions.
    • Near Real-Time Updates: Updates to your DNS records are carried out globally in near real-time.
    • Easily Managed: Manage your DNS zones with a friendly and intuitive interface. The same interfaces and APIs currently used to manage DNS zones hosted at Openprovider’s nameservers can be used to manage Premium DNS zones.
    • Competitive Pricing

 

 

How can I enable the Premium Global Anycast DNS service for a new domain registration using the Reseller Control Panel?

 

Enabling Premium Global Anycast DNS for a new domain registration is simple. Simply check the ‘Premium DNS by Sectigo’ box during the registration process. When you do that, the Sectigo nameserver group will be selected automatically in the ‘Nameserver Settings’ section.

 

dns1.png

 

dns2.png

**NOTE:

The Premium Global Anycast DNS by Sectigo are separate nameservers from the free Nameservers of Openprovider.
Activating these nameservers means a new, empty zone will be created on the Sectigo servers, and any records you want to use have to be created in the new zone of Sectigo! If you already have a standard (active) Openprovider DNS zone for this domain name, we recommend using the flow described below.

 

 

 

How can I enable the Premium Global Anycast DNS service for an existing domain using the Reseller Control Panel?

 

You can achieve this in 2 different ways.


OPTION 1
Please use the first option when the domain is currently actively running on the Openprovider DNS and you would like to create a matching zone on the Sectigo DNS service.

  1. Create the Premium DNS zone for that domain directly in the ‘DNS management’ area.



    dns3.png


    In case a standard zone for this domain already exists in your account, the system will give you the option to copy the records the records to the new zone.

    Screen_Shot_2022-07-11_at_12.39.57.png

    We advise to wait until the zone is active (can be found / pinged via online tools) , before you update the domain to the Sectigo nameservers via the detailpage of the domain.
    (Detailpage = page with all the details of the domainname itself found via Domain Overview)

    Click on "edit details" on the domain detail page and scroll down to the nameserver section.
    The Sectigo nameservers will be shown in the dropdown, once a premium zone exists for the domain.


    Screen_Shot_2022-07-22_at_14.58.18.png



OPTION 2
The following option can be used when a domain is not currently actively using the Openprovider nameservers. Because the update of the NS will be triggered before the zone is created and resolves, which might cause downtime on the domain itself.

  1. Edit the domain details via the domain detailpage, check the ‘Premium DNS by Sectigo’ box in the domain details view and save your changes.
    This will automatically create a new Premium Global Anycast DNS zone for that domain and will select the Sectigo nameserver group in the ‘Nameserver Settings’ section.

    You will also see the option to select a template for the new zone that you will be creating.

    Once saved, the domain is updated and the zone is created
    Please go to DNS Management > DNS Zones overview.
    From here you can find the zone. You will see "provider" = Sectigo.

 

 

Does the Premium Global Anycast DNS service support DNSSEC?

 

Yes, DNSSEC is fully supported by the Premium Global Anycast DNS service.

 

 

Can I enable the Premium Global Anycast DNS service when transferring a domain to Openprovider or when trading a domain?

 

No, the Premium Global Anycast DNS service is not available in these cases just yet, but we are planning to add support for them in the near future. Once a domain has been successfully transferred to Openprovider, Premium Global Anycast DNS can be enabled via a domain update action. 

 

Can I transfer my Premium Global Anycast DNS subscription from one domain to another?

 

No, the Premium Global Anycast DNS service is tied to a specific domain and cannot be transferred between domains.

 

How do I manage the Premium Global Anycast DNS service from the Reseller Control Panel?

 

You can manage your premium DNS zone in the same way you manage your standard DNS zones, i.e. from the domain details page or from the ‘DNS Management’ section.

 

You can also manage your Premium DNS zone using the "Single domain DNS Panel" (dnspanel.io).

 

 

How do I disable the Premium Global Anycast DNS service for a given domain using the Reseller Control Panel?

 

Please follow these steps:

 

  1. In the domain details view, select the edit option and change the nameservers to the ones that correspond to the DNS service you will be using after cancelling the Premium DNS service. If you wish to use Openprovider’s standard DNS service, just select the Openprovider nameserver group. If you plan on using a third party provider, please enter the corresponding nameservers. In this case, please ensure that the new DNS zone is available before performing the migration.
  2. Save your changes.
  3. Wait for 24-48 hours to ensure that the changes are propagated globally.
  4. Go back to the domain details view, edit the domain and uncheck the ‘Premium DNS by Sectigo’ box.
  5. Save your changes.
  6. In order to cancel the subscription itself, delete the zone via the domain management menu.



What DNS record types are supported by the Premium Global Anycast DNS service?

 

The Premium DNS service supports the same record types as our standard DNS service. More information can be found here: https://support.openprovider.eu/hc/en-us/articles/216648808-DNS-Records.

 

The TLSA and SPF type (record type SPF is deprecated) records which are supported by our standard DNS service but not by the Premium DNS service. If you are currently using a TLSA record for one of your domains and wish to enable the Premium DNS service for that domain, please ensure you remove the TLSA record first or get in touch with our support team. If you have a DNS record of type 'SPF', please convert it to a TXT record before importing/copying records to the Premium DNS service.

Not Supported
mceclip0.png

Supported
mceclip2.png

Can I use the Premium Global Anycast DNS service if my domain is not managed by Openprovider?

 

Yes, you can create a Premium DNS zone for a domain even if that domain is currently not managed by Openprovider.

 

How do I delete my Premium DNS zone and prevent further billing?

There are 2 options to delete your Sectigo Premium DNS zone.

- You can disable the auto renewal (Set to "on" by default, this can not be changed at this moment)
- You can delete the zone by clicking on the red bin icon. Please note, the zone will be deleted immediately  and the zone will stop resolving.

As long as the zone exists, the billing will take place every year.

Screen_Shot_2021-09-08_at_13.41.03.png

 

I now see 2 zones in my overview. Is this alright or do I need to remove one?

It can happen that you find 2 zones for the same domain in your overview. In the column "DNS Provider" you can see on which platform this zone is managed (Openprovider or Sectigo)
It is not a problem that there are 2 zones for the same domain, the domain itself will only be connected to 1 zone. The other will not be used.
We advise to keep the Openprovider zone just after the update. In case something goes wrong, you can directly switch back to the Openprovider zone.

Deleting the zone afterwards is up to the reseller itself.
You could decide to delete the zone later, so there is no confusion for yourself or your colleagues in which DNS zone the record changes should take place.

Removing the not-used zone could help in keeping the overview clean and organised.
But keeping the zone might be interesting if you ever want to switch back or would like to know the previous used records.

Please note that both zones will be operating on completely different platforms.
So changes and updates which are made in the Sectigo zone on the Sectigo platform will NOT be automatically synchronised in an (old) Openprovider zone and so the same goes for the other way around.

Screen_Shot_2022-07-28_at_14.52.03.png


Billing

 

How does billing work for the Premium Global Anycast DNS service?

 

The Premium DNS service is a yearly subscription service, and it is automatically renewed every year unless the Premium DNS zone is deleted.
You can find the renewal date of the zone in the DNS management --> Zone overview.

 

Screen_Shot_2021-09-08_at_13.55.04.png

What happens to my subscription if I delete the Premium Global Anycast DNS service for a domain?

 

If you delete a Premium DNS zone, the subscription to that zone will be cancelled immediately and you will not be billed for that zone anymore in the future.

 

Note that if you delete your Premium DNS zone before the current billing cycle has come to an end, you will not get a refund for the rest of the 1-year period you paid for as mentioned in the signed Terms and Conditions.

Click here to read how to delete your Premium DNS zone.

 

What happens to my subscription if I delete my domain, I transfer it out or my domain expires?

 

Your Premium DNS zone is not deleted automatically if you transfer your domain out of Openprovider, when you delete your domain or when the domain expires.
It is important that if you want to stop the Premium DNS service, you have to explicitly delete that zone from the Openprovider platform to stop the subscription or disable the auto renewal.

As long as the zone is present in the control panel, the subscription is active and will be invoiced on a yearly basis. There will be no refund provided, also not when it was not actively used or connected to a non active domain, as mentioned in the signed Terms and Conditions.

Click here to read how to delete your Premium DNS zone.

 

 

API

Is the Openprovider API compatible with Premium Global Anycast DNS?

 

Yes, the Openprovider DNS API is fully compatible with the Premium DNS service and can be used to create, manage and delete your Premium DNS zones and records programmatically, just as you do with your standard DNS zones. Please refer to our API documentation for more details on how to manage this service.

 

How can I enable the Premium Global Anycast DNS service when registering a new domain programmatically using the API?

 

Just add the ‘isSectigoDnsEnabled’ => 1 parameter to your createDomainRequest. If you are using the  PHP library for our XML API:

 

$request = new OP_Request;

$request->setCommand('createDomainRequest')
    ->setAuth(array('username' => '***', 'password' => '***'))
    ->setArgs(array(
            'ownerHandle' => 'AB123456-NL',
            'adminHandle' => 'AB123456-NL',
            'techHandle' => 'AB123456-NL',
            'domain' => array(
                    'name' => 'example',
                    'extension' => 'tld'
            ),
            'period' => '1',
            'nameServers' => [
                    0 => ['name' => 'NS1.sectigoweb.com'],
                    1 => ['name' => 'NS2.sectigoweb.com'],
                    2 => ['name' => 'NS3.sectigoweb.com'],
                    3 => ['name' => 'NS4.sectigoweb.com'],
            ],
            'isSectigoDnsEnabled' => 1,
    ));

How can I enable the Premium Global Anycast DNS service for an existing domain programmatically using the API?

 

Add the ‘isSectigoDnsEnabled’ => 1 parameter to your modifyDomainRequest. PHP example:

$request = new OP_Request;

$request->setCommand('modifyDomainRequest')
    ->setAuth(array('username' => '***', 'password' => '***'))
    ->setArgs(array(
            'domain' => array(
                    'name' => 'example',
                    'extension' => 'tld'
            ),
            'isSectigoDnsEnabled' => 1,

    ));

This will enable Premium Global Anycast DNS service for the domain and will create a default Sectigo zone (with just NS and SOA records). To change nameservers to Sectigo ones, it will need to be another modifyDomainRequest after populating the Sectigo DNS zone. Please refer to How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?

How can I disable the Premium Global Anycast DNS service for one of my domains programmatically using the API?

 

Add the ‘isSectigoDnsEnabled’ => 0 parameter to your modifyDomainRequest. PHP example:

 

$request = new OP_Request;

$request->setCommand('modifyDomainRequest')
    ->setAuth(array('username' => '***', 'password' => '***'))
    ->setArgs(array(
            'domain' => array(
                    'name' => 'example',
                    'extension' => 'tld'
            ),
            'isSectigoDnsEnabled' => 0,

    ));

This will disable the Premium Global Anycast DNS service for the domain and delete the Sectigo DNS zone. Please note that this won't change the nameservers of the domain. To change nameservers while disabling the Premium Global Anycast DNS service, you will need to specify new nameservers in the modifyDomainRequest along with 'isSectigoDnsEnabled' => 0.

Please note that the 'isSectigoDnsEnabled' parameter must only be used to enable or disable the Premium DNS service. It must be omitted from the API calls with which you don’t intend to toggle the Premium DNS service.

 

How I can move to Sectigo DNS and move all record from OpenProvider DNS to Sectigo DNS?

 

Yes, You can search for the zone matching a certain name pattern and provider with the query parameters : `name_pattern=example.domain&provider=openprovider`


So the full command would look like :

curl -X  GET "https://api.openprovider.eu/v1beta/dns/zones?name_pattern=example.domain&provider=openprovider" \
-H 'Authorization: Bearer <API TOKEN>'

response will have the target records.

Then add the desired records to the zone :

curl -X  PUT "https://api.openprovider.eu/v1beta/dns/zones/example.domain" \
-H 'Authorization: Bearer <API TOKEN> ' \
-H 'Content-Type: application/json' \
-d '
{
"id": 12275390,
"name": "example.domain"
"provider": "sectigo",
"records": {
"add": [
{
"name": "",
"ttl": "900",
"value": "127.0.0.2",
"type": "A"
}
]
}
}

 

Can the Premium Global Anycast DNS service also be used via Plugins, like WHMCS, Blesta or HostBill?

 For WHMCS, you can start selling premium DNS with our free provisioning module already!

Provisioning modules for other integrations will be available based on demand. Please check with your account manager for a timeline.

 



Errors (section under construction)

Known errors and how to resolve them

Error 869 - An unknown Sectigo DNS error has occurred; please contact Openprovider.
This error can appear when you are creating a zone which contains an invalid record. For exaple, this could be an MX record with an IP address. Please check and adjust your zone and try it again.

Error 866 - This type of record is not supported by Sectigo yet.
This error can appear when you are creating a zone with unsupported records. An example is TSLA, which is a record type which is not supported.

Error 864 - This zone is already active on Sectigo side.

Was this article helpful?
2 out of 2 found this helpful
Additional questions? Submit a request