Domain Name Servers

We run our own worldwide network of Anycast DNS servers.

Authoritative Nameservers

This section is for customers hosting domains with us:

DNS Control Panel
Anycast Server (read more)
Nameservers (Agecroft, UK) (Kilburn, UK) (Williams, UK) (AQL, UK) (Telehouse West, UK) (Telehouse North, UK) (Geneva, CH) (Geneva, CH)
AXFR Server (read more)
Further Info

Resolving Nameservers

If you have a server hosted by us then you are welcome to use these as your resolvers:

(for NAT64 using 64:ff9b::/96)

We also operate resolvers with cryptographically protected transport technologies.

Above addresses on port 853
DNSCrypt at on port 8443 with the following DNS Stamps:

In addition, the DNS-over-HTTPS service is open to all, and will ensure that your DNS traffic is encrypted between your device and our resolvers.

DNS-over-HTTPS on port 443 with the following DNS Stamps:

Our DoH resolvers are configured to support TLSv1.2 and TLSv1.3, using an “intermediate” cipher suite according to Mozilla’s SSL Configuration Generator.

Privacy DNS

Having a trustworthy and uncompromised browser is a security concern for anybody who uses web-based control panels and administration tools. The best solution would be to have a different browser (or profile/container) for day-to-day browsing versus important tasks such as banking, billing, or service management. As an added layer of protection for this use-case we also provide a privacy DNS service. Based on Pi-Hole, by blocking advertising providers this should help reduce the attack surface of visiting websites and reduce the risk of your browser being infected during your surfing by a compromised advert carrying a drive-by exploit payload.

Our privacy DNS resolving service is open.

DNS-over-HTTPS on port 443

Safety DNS

Our “safety DNS” service uses Whalebone to block access to known malware-serving, command and control, phishing, and other high-risk domains. This service logs and retains DNS queries using virtual appliances hosted in our data-centres, and provides real-time dashboards of threat information for our network and security team to analyse.

The safety DNS resolving service is only available to customers (hosting, connectivity, or downstream networks).