DNS Management on DigitalOcean — Complete Guide 2026

จัดการ DNS ฟรีผ่าน Control Panel หรือ API รองรับ record หลากหลายชนิด

What is DigitalOcean DNS?

DigitalOcean lets you add domains you own and manage their DNS records for free through both the Control Panel and API, with no additional charges. It's ideal for those wanting to centralize domain and server management in one place, reducing the hassle of switching between separate domain and hosting providers.

• Free — no additional charges beyond normal Droplet/service usage
• Manage via Control Panel (GUI) or API/doctl (command line) — both options available
• Centralize domain and server management in one location

Adding a Domain to Your Account

One thing that surprised us: you can add domains using ICANN-recognized TLDs only. After adding a domain to DigitalOcean's system, you must change the nameservers at your domain registrar to point to DigitalOcean's nameservers. This change may take time to propagate globally (DNS propagation).

• Supports only ICANN-recognized TLDs
• Must change nameservers at your registrar to point to DigitalOcean
• Nameserver changes take several minutes to hours to fully propagate globally
• Add domains via the Networking section in the Control Panel or through the API

Supported DNS Record Types

DigitalOcean supports all the main DNS record types needed for typical setups, covering domain-to-IP pointing, email configuration, and domain ownership verification for various services.

• A / AAAA — Point your domain to your server's IPv4/IPv6 address
• CNAME — Point a subdomain to another domain
• MX — Set the mail server(s) for your domain
• TXT — Verify domain ownership or store SPF/DKIM values
• NS, SRV, CAA — Manage secondary nameservers, service records, and control SSL certificate issuance

CAA Records Explained — Why They Matter

CAA (Certification Authority Authorization) records specify which Certificate Authorities are authorized to issue SSL certificates for your domain. Setting CAA records reduces the risk of someone fraudulently requesting a certificate for your domain from an unauthorized CA.

• Restrict which CAs can issue SSL certificates for your domain
• Adds a security layer — reduces the risk of fraudulent certificate issuance
• Especially useful when paired with automatic certificate services like Let's Encrypt

Integration with Load Balancer and Spaces

Domains managed through DigitalOcean's DNS integrate directly with Load Balancers and Spaces (object storage), streamlining automatic SSL certificate management and reducing manual setup steps compared to managing DNS with a separate provider.

• Connect to a Load Balancer for traffic distribution with automatic SSL management
• Link to Spaces (object storage) for custom domains on static files
• Fewer manual SSL certificate setup steps compared to external DNS

DNS Management via API and doctl

Besides the Control Panel, DigitalOcean exposes a REST API for automating DNS record management — ideal for teams implementing Infrastructure as Code or deploying multiple domains at once. You can call the API directly or use the official CLI tool doctl.

• Manage records directly through DigitalOcean's REST API
• Use doctl (official CLI) to manage records from the command line
• Suited for teams implementing Infrastructure as Code or CI/CD pipelines

Common Issues and Solutions

From our hands-on testing — the most common issue when a domain won't resolve is incomplete nameserver propagation — this just requires waiting. It can also be caused by incomplete DNSSEC configuration or pending verification at your registrar.

1. Domain not resolving — usually due to incomplete nameserver propagation; time is needed
2. Verify that all nameservers are correctly configured at your registrar
3. Check that DNSSEC (if enabled) is configured consistently at both your registrar and DigitalOcean
4. Some registrars require additional verification before allowing nameserver changes to complete

Migrating DNS from Another Provider to DigitalOcean

DNS migration should be done carefully to avoid website or email downtime during the transition. The safe approach is to copy all records from your current provider to DigitalOcean first, then switch nameservers at your registrar as the final step.

1. Export or manually copy all records from your current provider first
2. Create every record in DigitalOcean before changing nameservers
3. Verify MX records carefully to ensure email doesn't stop working
4. Change the nameservers at your registrar only after confirming all records are in place

Advantages and Limitations vs. Other DNS Providers

DigitalOcean DNS's main advantage is convenience — it's in the same system as your servers, costs nothing extra, and integrates smoothly with other DigitalOcean services. Dedicated DNS providers like Cloudflare often offer additional features such as built-in CDN or DDoS protection, and many projects use both together based on project needs.

1. Strengths: integrated with your infrastructure, no extra cost, easy management
2. Some dedicated DNS providers offer extras like CDN or built-in DDoS protection
3. Many projects use DigitalOcean DNS alongside a CDN from another provider
4. Choose based on your specific project needs — there's no one-size-fits-all answer

Get $200 Free Credit →