Cloud platformDNS hostingCapabilities verified
DigitalOcean DNS
Migrate DNS zones to or from DigitalOcean DNS: what's supported, what access you need, and what changes for each destination.
See how a domain's records would land at DigitalOcean. Free and read-only.
Access we need
- Credentials
- Personal access token (custom scopes)
- Permissions
- domain:read for the preview; domain:read, domain:create, domain:update and domain:delete to apply.
What DigitalOcean supports
The same data the translation engine uses when it plans a migration.
- Create zones through the API
- List zones through the API
- Turn on DNSSEC through the API
- Apex CNAME (flattening)
- Apex ALIAS record
- Aliases to cloud resources
- CDN proxy on records
- Routing policies
- Minimum TTL
- 30s
Record types
- A
- AAAA
- CNAME
- MX
- TXT
- NS
- SRV
- CAA
Good to know
- DigitalOcean nameservers don't support DNSSEC, so turn DNSSEC off at the registrar before switching to them.
- TXT records are limited to roughly 500 characters in total and can't contain backslashes.
- CAA records can't use a bare ";" value or CA parameters such as "letsencrypt.org; accounturi=…".