DNS Management

RuleDNS is Netinternet’s own authoritative DNS infrastructure. When you use Managed DNS, your domain’s DNS is hosted on RuleDNS: you create a DNS zone, point your nameservers to HEIMWALL, and manage every record from the console. Geo-routing and WAF bridging (routing traffic through HEIMWALL on a per-record basis) are also available.

Managed DNS is not required for WAF

You don’t need to change nameservers to use WAF protection. Pointing your A/AAAA records to the HEIMWALL edge IPs at your current DNS provider is enough. See the steps in DNS Setup.

Creating a DNS zone

1. In the DNS Zone section of the console dashboard (My Resources), click the New button. The “Add DNS Zone” modal opens.

2. Enter the zone name — the domain itself, e.g. example.com.

3. (Optional) Check “Route via WAF”. Two more fields appear:

   • Origin — your server’s IP address (e.g. 203.0.113.42)
   • Server Placement — which region/server group serves the traffic

   This option binds the @ (apex) record to the WAF and adds a CNAME for www while the zone is created — your traffic flows through HEIMWALL protection.

   If the domain already exists as a WAF Zone: when an active WAF zone with the same name belongs to you, a new one is not created; the existing zone is adopted automatically. Your rules, origin and all WAF settings are preserved as they are — only DNS management moves to HEIMWALL and address routing becomes automatic.

4. Click Create. You are taken to the zone detail page. If the WAF setup could only partially complete, a yellow warning banner appears; you can continue to the zone and finish the missing step later.

Nameserver delegation

When the zone is created, HEIMWALL shows your assigned nameserver addresses in the Nameservers card on the zone detail page. Replace the NS records at your domain registrar with these addresses.

The delegation status is shown as a badge on the card:

Badge	Meaning
Delegation pending	The NS change hasn’t propagated yet — the status updates automatically once the records propagate
Delegation verified	Your domain uses the HEIMWALL nameservers, the zone is active
Error	Delegation could not be verified — check your NS records

Zone detail page

The top of Console → DNS → [zone] shows four cards:

• Nameservers — NS addresses and delegation status
• This Month Queries — the zone’s monthly DNS query count
• WAF Routed — number of A/AAAA records routed through HEIMWALL
• Delete Zone — permanently delete the zone

The Settings button in the top right leads to zone sharing (read-only access for another user) and zone deletion. The Filter button lets you filter records by name and type.

Adding a record

1. Click the add-record button on the zone detail page.

2. Fill in the Name — @ for the apex, or a subdomain like www or mail.

3. Pick the Type and fill in the value fields (see the table below).

4. TTL defaults to 3600 seconds; records routed through the WAF are automatically set to 300 seconds.

5. Click Add.

Supported record types

Type	Fields	Note
A / AAAA	Value (IPv4/IPv6)	Offers the “Route via WAF” option (see below)
CNAME	Target hostname	Alias records
TXT	Text value	SPF, DKIM, verification records
MX	Priority + mail server	Priority is a numeric field
SRV	Priority, Weight, Port, Target	Service records
CAA	Flags, Tag, Value	Certificate authority restrictions
NS	Nameserver	Subdomain delegation only — apex NS/SOA records are managed automatically by HEIMWALL

DNSSEC records (DS/DNSKEY/RRSIG/NSEC) are managed automatically; they are not added by hand.

WAF bridging on A/AAAA records

If you check “Route via WAF” when adding an A or AAAA record:

• you enter your server’s real IP in the Origin field,
• you pick a Server Placement,
• the record answers visitors with HEIMWALL edge IPs, and traffic is filtered by the WAF before reaching your origin,
• the TTL is set to 300 seconds automatically.

Every A/AAAA row in the record list shows a WAF toggle: blue means on, red means off. Click the toggle to enable or disable protection per record.

Editing and deleting records

• Edit: Click a row — the Value and TTL (plus Priority for MX) become editable inline. Save applies, Cancel reverts.
• Delete: Click the delete icon on the row and confirm in the confirmation modal.

Changes propagate to the HEIMWALL nameservers within seconds.

Bulk import from a zone file

You can bulk-import records by pasting a BIND / RFC1035 zone file exported from your current DNS provider. Click the Import button on the zone detail page:

1. Paste the zone file content into the text area.
2. Click Preview — the system shows which records are new, which already exist, and which are managed by WAF.
3. Select the records you want to import and click Import.

WAF-managed records are automatically skipped; existing records are not overwritten.

Next steps

Geo-routingRoute visitors to the nearest region or one you choose.

Health ChecksMonitor your origins and fail traffic over to healthy servers.