There are plenty of good options out there! Many use Cloudflare, though they are another giant. I've been happy with dsec and freedns, and would recommend both.
Ive used freedns for over a decade; it's simple and straightforward. Their free tier is plentiful, and their subscription costs are reasonable.
I recently moved my self-hosted services to dsec so I could better automate SSL certs. It's been nice and easy too!
Desec.io is a solid option - it allows for various types of records like TLSA and SRV. It can also generate scoped API tokens e.g. for "only TXT records of the _acme-challenge subdomain of example.com" to use in automated cert renewals, so pretty good for granularity. It's also a nonprofit.
I think selfhosting DNS is beneficial when you wanna control your own DNSSEC keys, but you'd need to account for high availability and safety. With that, you could do what's called a "hidden primary + public secondary" setup to protect your master DNS data from the public prying. You can even use 3rd-party services like ns-global.zone as your secondaries for redundancy and to reduce load on your infra, too. I recommend Technitium and their guidance if you wanna get started
I use cloudflare mostly because I buy my domains through them as they offer at cost domain names for many TLDs. Internally I use PiHole and then just point what I need externally to cloudflare trough a reverse proxy and a DMZ box.
Just my opinion and experience. Setup a couple of cheap VPS instances, and setup recognition, one primary, one secondary.
If your looking for a great DNS provider, OVH is rock solid. They also register domains, I have all my domains and zones with them.
Also a dedi and a VPS, also they have an API for DNS updates that can be used to get certificates for internal domains
Just chiming in with my suggestion - if the company's location also benefits you:
A private UK company which also hosts VPS in US and NL
I've moved my domain here and used their DNS API to remove the need to pay for a couple of DynDNS companys.
0 downtime over... dunno... 5 years?
I have used CloudDNS with success in the past.
Take a look at Bunny ( https://bunny.net/dns/ ), they're based in Europe with worldwide coverage, and have a lot of other useful services as well.
all 24 comments