2z.fi — DNS documentation

What 2z.fi is for

2z.fi provides a web interface and REST APIs for managing DNS configuration for enabled domains. It is designed for administrators who want a private workspace, validated changes, revision history, and deterministic zone representations.

Domains and zones

A domain is the name you manage in your account. Its DNS zone contains the authoritative records for that name and its children. The same normalized domain may be added by more than one account; each account starts with its own unverified, limited workspace state.

DNS records

Records map names to services and values. Common administrator records include A and AAAA for addresses, CNAME for aliases, MX for mail delivery, TXT for verification and policy text, NS for delegation, CAA for certificate authorization, and SRV for service discovery. The application validates supported names, values, TTLs, and record combinations before accepting changes.

Delegation and nameservers

A zone becomes authoritative when its parent delegates the domain to the nameservers assigned by the DNS service. Update the nameserver set at the registrar or parent zone, then allow caches to expire according to their TTLs. 2z.fi provides configuration data and representations; it does not run BIND or a nameserver in this project.

Safe DNS changes

Prefer small, reviewable changes. Check the owner name, record type, value, and TTL before saving. Keep verification tokens and other sensitive values out of public sharing paths. Use revisions and validation to detect conflicts before applying a change.

Designed for automation

The service is being designed with stable JSON and DNS zone representations so administrators can inspect and update their own zones from scripts. Capability URLs, authentication, rate limits, and write operations will be documented separately before they are enabled.