AIARCOASC Docs
Sign inStart free

Authoritative DNS

Authoritative DNS with DNSSEC and a recursive-resolver firewall for end users.

What it is

Same authoritative service as Edge DNS, with optional recursive-resolver-firewall for end users: route your office DNS through AIARCO and block resolution to malware C2, phishing, parked domains.

When to use it

  • Move authoritative DNS without losing query analytics.
  • Protect end users from phishing/malware by blocking risky resolution.
  • Sign zones with DNSSEC without operating KSK/ZSK.

Quickstart

asc shield dns zones create example.com
asc shield dns resolver-firewall enable --policy block-malware,block-phishing
client.shield.dns.zones.create('example.com')
client.shield.dns.resolver_firewall.enable(policy=['block-malware','block-phishing'])
await client.shield.dns.resolverFirewall.enable({ policy: ['block-malware'] });

Limits & quotas

LimitDefaultBurstNotes
Queries free tier25M / mo—
DNSSECECDSA P-256—

Pricing

See pricing. Pay-as-you-go, billed monthly via Stripe.

API surface

  • POST /v1/shield/dns/zones
  • POST /v1/shield/dns/resolver-firewall/enable

Required scope(s): shield:write. See Scopes.

Security

All access is authenticated and scoped. See Auth & scopes and Network controls.