Editing DNS API (section)

= How to use HEXONET DNS Service =
=== Create new DNS zone ===
You can create a new DNS zone with the following command

<pre>
COMMAND = CreateDNSZone
DNSZONE = (DNS zone name)
</pre>


=== Create new DNS zone for a domain not registered with HEXONET ===
It is possible to use the HEXONET DNS service to host domains registered with other Registrars (also referred to as "external zones"). This service is currently offered at no charge until the end of 2021. Resellers should, however, be aware that charges will apply starting from January 1st, 2022.

To create an external zone, use the optional flag EXTERNAL=1

<pre>
COMMAND = CreateDNSZone
DNSZONE = (DNS zone name)
EXTERNAL = 1
</pre>


=== Create new DNS zone for a domain that is about to be transferred HEXONET ===
It is possible to create a zone in the HEXONET DNS system in preparation for an incoming domain transfer to HEXONET.

To create this type of zone, use the optional flag DOMAINTRANSFER=1

<pre>
COMMAND = CreateDNSZone
DNSZONE = (DNS zone name)
DOMAINTRANSFER = 1
</pre>

Please note that if the domain transfer is not completed within 14 days from the creation of the zone, the zone is automatically deleted from the HEXONET DNS system.


=== Get a list of all DNS zones ===
You can query a list of all DNS zone with the following command

<pre>
COMMAND = QueryDNSZoneList
</pre>


=== Get information on a DNS zone ===
You can query all information regarding a DNS zone with the following command

<pre>
COMMAND = StatusDNSZone
DNSZONE = (DNS zone name)
</pre>


=== Add and manage records ===
You can add and manage records for a DNS zone with the following command

<pre>
COMMAND = UpdateDNSZone
DNSZONE = (DNS zone name)
ADDRR0 = (add new record)
DELRR0 = (remove record)
</pre>


=== Enable DNSSEC ===
You can enable DNSSEC on DNS zones using the following command

<pre>
COMMAND = UpdateDNSZone
DNSSEC-MODE = AUTO
DNSZONE = (DNS zone name)
</pre>

Once enabled, you must input the DS and KEY records into the respective domain. You can get the DS and KEY record information by executing the following command

<pre>
[COMMAND]
COMMAND = StatusDNSZone
DNSZONE = (DNS zone name)
EOF
 
[RESPONSE]
CODE = 200
DESCRIPTION = Command completed successfully
PROPERTY[DNSSEC-DS-SHA-1][0] = 20407 8 1 040772816032dc2a675d7f74725d747e47c45185
PROPERTY[DNSSEC-DS-SHA-256][0] = 20407 8 2 a1dd1c5c5d78cd71477472ec5a3eeeaee65ecbc461b63ecd4630fd44d9492028
PROPERTY[DNSSEC-KEY][0] = 257 3 8 AwEAAbfEdVJVqSuGwU8XEAtUWtODHv2CNPAwDKATFs0V17O2/Qe+vSUPadWNISqhSr7wAVrNxdNbOPxzw/iF8xN84GN3hArecKhX/+Yb6fSsucqkwd8fuloU+jTBAl4dq7LRM5DbqdLrN6MUyq1p2h86lP9pXjEaeTYtZ0i8zeV7IyG4d/q+FTNG+1Daw90YIvyFdek1HnNd9pXRSeYhdB8GyxZAGPPID0NBk5/L/nY3mCTi7ezQ7UsdVuB/W53sjlSgjgfFnxsqanN0XK87liuZ8fSMi84CPRTqoYglIBUVxHtTlZIN7Xg72g5HsNzX3EEQfcvkB4h62CcBKX3AIron3zc=
PROPERTY[DNSSEC-KEY-TAG][0] = 20407
PROPERTY[DNSSEC-MODE][0] = AUTO
...
EOF
</pre>

To input the records into the domain, execute the following command

<pre>
COMMAND = ModifyDomain
ADDSECDNS-DS0 = (DNSSEC-DS from StatusDNSZone, you can choose either SHA-1 or SHA-256)
ADDSECDNS-KEY0 = (DNSSEC-KEY from StatusDNSZone)
DOMAIN = (domain name)
</pre>

=== Disable DNSSEC ===
You can disable DNSSEC on a DNS zone with the following command

<pre>
COMMAND = UpdateDNSZone
DNSSEC-MODE = DISABLED
DNSZONE = (DNS zone name)
</pre>