No-IP MSP Multi-Tenant Platform: A Single Operational Control Plane for MSPs

Managed DNS is a service where a third-party provider hosts and operates your domain's DNS instead of you running your own nameservers. Your DNS records live on the provider's distributed network, which answers queries and keeps your domain resolving even if one server fails.

Every domain has a DNS zone file that maps it to an IP address. With managed DNS, that zone is hosted across multiple points of presence (PoPs), often on an Anycast network, instead of one server. This adds redundancy (another server takes over if one fails), faster resolution (queries route to the nearest PoP), and often extra security like DDoS mitigation and DNSSEC. You still manage your own records - A, AAAA, CNAME, MX, TXT, etc., through a dashboard or API.

Each record has a TTL (Time to Live): the number of seconds a resolver caches the answer before checking again. TTL controls how fast a change propagates across the internet.

How It Works:

1. Update your domain's NS (nameserver) records at your registrar to point to the provider's nameservers.
2. Recreate your DNS records in the new zone.
3. The provider's network takes over resolving queries for your domain.
4. Future record changes take effect once the TTL expires and propagation completes. (Read more: How to Set Up Plus Managed DNS).

Troubleshooting:

• Change not showing yet? Propagation can take minutes to 48 hours depending on TTL.
• Site unreachable after switching? Confirm all records were recreated and the NS change saved correctly.

A domain registrar is who you register and own your domain through (e.g., GoDaddy, Namecheap). A DNS hosting provider stores your DNS zone and answers queries for your domain. They don't have to be the same company.

Most registrars include basic free DNS hosting, but it's usually limited: no dedicated Anycast network, no failover routing, and no DNSSEC or DDoS mitigation. A dedicated DNS hosting provider focuses specifically on DNS resolution and typically offers more of these features. You can register your domain with one company and host DNS with another by updating the domain's nameservers - this doesn't affect ownership.

Switching DNS Hosts:

1. Keep your domain registered where it is.
2. Sign up with a DNS host and create a zone for your domain.
3. Recreate your records (A, MX, TXT, CNAME, etc.).
4. Update the nameservers at your registrar to point to the new host.
5. Wait for propagation to complete.

Troubleshooting:

• Can't change nameservers? Check for a domain lock at your registrar.
• Email breaks after switching? MX, SPF, DKIM, and DMARC records need to be recreated exactly.

Managed DNS resolves DNS for domains with a fixed, static IP, like websites and servers. Dynamic DNS (DDNS) automatically updates a hostname's DNS record whenever the IP address changes, which is needed for connections without a static IP.

Residential and small-business connections are usually assigned a dynamic IP by the ISP, which can change - especially behind CGNAT (Carrier-Grade NAT), where multiple customers share a public IP pool. If a DNS record isn't updated after an IP change, the hostname stops resolving. Dynamic DNS uses an update client (or router-integrated DDNS) to detect IP changes and push the new address automatically. Managed DNS assumes a stable IP and focuses on resolution speed and redundancy rather than tracking IP changes. (Read more: What Is a Dynamic IP Address, Remote Access Solutions).

Managed DNS

• Best for: domains and servers with a static IP
• Core function: fast, redundant resolution

DNS dinámico

• Best for: devices and networks with a dynamic IP or behind CGNAT
• Core function: auto-updates records when the IP changes

A single setup can use both - a business domain on Managed DNS, and a home device reachable through a Dynamic DNS hostname, often combined with port forwarding and firewall configuration on the router.

Troubleshooting:

• Hostname resolving to the wrong IP? Confirm the DDNS client is running.
• Can't reach a device remotely? Check that the port is forwarded and not blocked by the firewall.
• Behind CGNAT? Standard port forwarding won't work, look at options like Public Tunnels.

Hosted DNS means a third party stores and serves your domain's DNS zone instead of you running your own nameservers. Premium DNS and Managed DNS typically add capabilities such as improved redundancy, performance, security, automation, or support beyond basic DNS hosting.

The terms are often used interchangeably, but they generally describe different levels of DNS service and management. The key difference is the infrastructure, features, reliability, and support provided by the DNS provider.

How they differ in practice:

• Hosted DNS: Your DNS zone is stored and served by a third-party provider. This removes the need to operate your own DNS servers, but the level of performance, redundancy, security, and support depends on the provider.
• Premium DNS: A paid DNS service that typically provides enhanced performance, redundancy, security, or additional DNS features compared with a provider's basic DNS offering.
• Managed DNS: A DNS service where the provider operates and maintains the authoritative DNS infrastructure and provides management features such as globally distributed DNS, advanced record support, automation, security features, and specialist support.

For example, No-IP's Managed DNS uses a distributed Anycast network to provide resilient DNS resolution. Depending on the plan, additional capabilities can include DNSSEC, REST API access, SLA-backed uptime, Team Login, and priority support. (More on: What Qualities Do You Look for in a DNS Service Provider?).

Choosing a Tier:

1. Personal site or small project →Plus Managed DNS.
2. Business-critical or high-traffic domain →Premium Managed DNS.
3. Already have DNS elsewhere, want redundancy →add Squared Backup DNS.

Troubleshooting:

• Need DNSSEC? It's only available on Premium Managed DNS and requires setup through Support.
• Not sure which tier you're on? Check your account dashboard or the pricing page.

Plus Managed DNS starts at $3.49/mo ($34.99/yr) for 1 zone. Premium Managed DNS starts at $9.99/mo ($99.99/yr) for 1 zone and adds API access, DNSSEC readiness, and an SLA.

Both tiers scale as you add zones, up to 25 zones per plan. See full tier and zone pricing in No-IP's Managed DNS Solutions above.

Both tiers include unlimited DNS records. Squared Backup DNS (secondary DNS) is available separately starting at $19.99/yr per zone. Annual billing saves 16% compared to monthly.

Troubleshooting:

• Need more than 25 zones? Contact sales for a custom enterprise plan (up to 250 zones supported).
• Not sure which tier fits? Compare query volume against your current DNS provider's usage stats before choosing.

Learn more:

• Plus Managed DNS Features

Set up your zone and records on No-IP first, verify they resolve correctly, then update your nameservers at your registrar last. Your site stays live throughout because the old DNS keeps working until the new nameservers fully propagate.

Downtime during a DNS migration almost always comes from records being missed or changed too early, not from the migration itself. The safest order is: build the new zone, verify it, then switch.

Step-by-Step:

1. Sign up for Plus or Premium Managed DNS and add your domain.
2. Recreate every existing record (A, AAAA, CNAME, MX, TXT/SPF, DKIM, SRV, CAA) exactly as they are with your current provider.
3. Lower the TTL on your current DNS records to around 300 seconds a day or two before switching, so any rollback is fast if needed.
4. Verify the new zone resolves correctly using a DNS lookup tool before touching your registrar.
5. Update the nameserver (NS) records at your registrar to No-IP's nameservers.
6. Monitor resolution for 24 - 48 hours; once propagation is complete, raise the TTL back to normal. (Read more: How to Set Up Plus Managed DNS).

Troubleshooting:

• Email stops working mid-migration? Check that MX, SPF, DKIM, and DMARC TXT records were copied exactly. These are the most commonly missed records.
• Some visitors reach the old server, others the new one? This is expected during propagation and resolves once the old TTL fully expires.

No-IP's Managed DNS supports A, AAAA, CNAME, MX, TXT, PTR, CAA, SRV, NS, URL redirect, SPF, DKIM, and DMARC records, with unlimited records included on both Plus and Premium plans.

• A / AAAA - point a hostname to an IPv4 or IPv6 address.
• CNAME - alias one hostname to another; cannot be used at the domain apex or alongside other record types on the same name.
• MX - routes incoming email to a mail server.
• TXT - holds text data; SPF, DKIM, and DMARC are all published as TXT records for email authentication.
• SRV - defines a host and port for a specific service (e.g., SIP, XMPP).
• CAA - restricts which certificate authorities can issue SSL certificates for your domain.
• PTR - used for reverse DNS lookups, mainly for email deliverability.
• NS - delegates a subdomain to a different set of nameservers.
• URL Redirect - forwards a hostname to a different web address.

Troubleshooting:

• Record not saving? Confirm it's not conflicting with an existing CNAME on the same name as CNAMEs can't coexist with other record types.
• Email failing after adding records? Double check the SPF/DKIM/DMARC TXT values with your mail provider's exact syntax.

Learn more:

• Understanding DNS Host Types
• Beyond the Basics: Advanced Records in DNS Configurations
• DNS Records Cheat Sheet

Secondary DNS is a backup copy of your DNS zone hosted on a separate provider's network, so your domain keeps resolving even if your primary DNS provider goes down. No-IP offers this as Squared Backup DNS.

DNS is a single point of failure for many businesses. If your primary DNS provider has an outage, your domain stops resolving even though your website or server is fine. Secondary DNS solves this by syncing your zone to a second, independent Anycast network. If your primary provider fails, the secondary network continues answering queries. It's most relevant for domains where any downtime has a direct business cost, like e-commerce, SaaS, or any revenue-generating site.

Troubleshooting:

• Records out of sync between primary and secondary? Secondary DNS zones sync automatically from the primary zone via zone transfer - verify the sync status in your dashboard if records look outdated.

Learn more:

• The Importance of DNS Diversification
• Is Your DNS Diversified?

No-IP backs its Managed DNS with a 100% uptime SLA (Service Level Agreement), delivered through a globally distributed Anycast network of 125+ points of presence so no single server or data center outage takes your domain offline.

The guarantee applies to DNS resolution availability - your domain's ability to be looked up and answered - not to your website's hosting or application uptime. Nameservers are deployed across geographically diverse data centers on different tier-1 bandwidth providers, so a localized outage or natural disaster at one location doesn't affect the rest of the network. Premium Managed DNS pairs the same 100% uptime guarantee with a formal SLA and priority support.

Troubleshooting:

• Domain not resolving despite the SLA? First confirm the issue isn't at your registrar (NS records) or your hosting server, since those sit outside DNS resolution.
• Want SLA credit details or terms? Check the SLA documentation directly.

No-IP secures Managed DNS through its distributed Anycast network (which absorbs and disperses DDoS traffic), DNSSEC support on Premium plans, and CAA records to control which certificate authorities can issue SSL for your domain.

DNS-layer security covers a few distinct risks: attackers overwhelming your DNS servers (mitigated by the Anycast network spreading traffic across many PoPs instead of one target), DNS spoofing or cache poisoning (mitigated by DNSSEC, which cryptographically signs DNS responses so resolvers can verify they weren't tampered with), and unauthorized SSL certificate issuance (mitigated by CAA records). Premium Managed DNS also includes SSL certificates and API access with authenticated requests, reducing manual points of failure.

Troubleshooting:

• Need DNSSEC enabled? It's available on Premium Managed DNS; enabling it requires generating and publishing a DS record at your registrar - contact Support for setup help.
• Seeing unexpected certificate issuance attempts? Add or review your CAA records to restrict issuance to your chosen CA.

Each plan includes a set monthly query allowance, but No-IP does not charge overage fees. If an account consistently exceeds its limit for 3 consecutive months, it's automatically upgraded to a matching plan on the next billing cycle.

Query limits scale with plan tiers from 500K/month on entry-level Plus up to 25M/month on the largest Premium tier. Occasional spikes (a traffic surge, a seasonal campaign) don't trigger any charge or plan change. The auto-upgrade only applies when usage stays above the limit for three consecutive months, which is treated as a sign the account has outgrown its current tier.

Troubleshooting:

• Traffic spiked unexpectedly? A single month over the limit won't affect billing or resolution as queries are still answered normally.
• Not sure how many queries you're using? Check your usage stats in the account dashboard against your plan's monthly allowance.

Yes! As long as your MX, SPF, DKIM, and DMARC records are recreated exactly on No-IP before you switch your nameservers, email delivery continues without interruption.

Email routing depends entirely on DNS records, independent of where your domain's website is hosted. When migrating DNS providers, mail flow breaks only when these records are missed or entered incorrectly, not because of the migration itself. No-IP's Managed DNS supports full email-related record types (MX, TXT/SPF, DKIM, DMARC), so any existing email setup (Google Workspace, Microsoft 365, custom mail servers) can be replicated exactly.

Step-by-Step:

1. Log in to your current DNS provider and list every MX, SPF, DKIM, and DMARC record exactly as configured.
2. Recreate each record in your No-IP zone using the same values and priorities.
3. Use a DNS lookup tool to confirm the new records match before switching nameservers.
4. Update nameservers at your registrar to No-IP's.
5. Send a test email through your mail provider after propagation completes to confirm delivery.

Troubleshooting:

• Emails bouncing after migration? Check that MX record priorities match your mail provider's requirements exactly.
• Emails landing in spam? Verify SPF, DKIM, and DMARC TXT records are present and correctly formatted as missing or malformed records are the most common cause.

Learn more:

• Beyond the Basics: Advanced Records in DNS Configurations
• What Is a DNS Record?