AS204921 anycast 6 points of presence DNSSEC · RPKI

DNS, edge, media and meetings — on one network.

Managed DNS with DNSSEC, an encrypted public resolver, Shield, RPKI, static hosting, origin tunnels, live video, broadcast, chat, mail and meetings — operated by a non-profit on the AS204921 anycast platform. Free for non-commercial use; commercial use is paid.

00

YunZheng LAB and Orbit, on film

The YunZheng apps people use every day are based on Orbit.

4 min 16 s · narrated · English subtitles · Watch on YunZheng LAB

01

Products

Orbit DNS Hosting

Anycast authoritative DNS.

  • Name serversns1.yunzheng.spacens2.yunzheng.space
  • ZonesForward and reverse (PTR) · DNSSEC signed online
  • OnboardingWhole zone · single hostname by NS · hostname by CNAME
  • RecordsGeo answers · weighted with health checks · apex ALIAS · HTTPS/SVCB · secondary DNS (AXFR, NOTIFY, TSIG)
  • Free plan50 zones · 1,000 records per zone
  • PropagationAbout 30 s to every point of presence

Compared with Amazon Route 53 · Cloudflare DNS

Orbit Public Resolver

Public recursive DNS, unmetered.

  • IPv4177.177.83.83
  • IPv62602:f3ff:83::83
  • DoHhttps://dns.yunzheng.space/dns-query
  • DoTdns.yunzheng.spaceport 853
  • ResolutionIterative from the root · cached per point of presence
  • Client networkAddress lookups carry a shortened form of your address, at most /24 or /56 · what is sent
  • PrivateFiltered instances with block/allow lists and rewrites, by platform plan

Addresses, privacy and limits →

Orbit Shield

Anycast edge in front of your hostname.

  • EdgeWAF · cache with purge · automatic TLS · hidden origin · compression
  • RulesCountry / ASN / IP / ISP · browser check · Bot Fight Mode · rate limit · waiting room
  • EnableProxied record in a hosted zone, or CNAME onboarding
  • IncludedWith DNS Hosting
  • Free plan20 hostnames · 500 GB of transfer a month

Compared with Cloudflare CDN · Akamai · Fastly · Sucuri

Orbit RPKI

Route origin validation.

  • RTRRFC 8210 · TCP 323 / 8282 · about 1M validated ROAs · refreshed every 10 min · public
  • Hosted CAROAs for your own resources · console and REST API · RRDP and rsync
  • Free plan2 certificate authorities · 200 ROAs

Hosted CA and RTR →

Orbit Verify

Human verification for your forms.

  • Embed<script src="https://verify.yunzheng.space/v1.js?v=1.4.0" async defer></script><div class="orbit-verify" data-sitekey="ovk_…"></div>
  • CheckInvisible by default · one-click fallback when the risk score reaches the key’s escalation threshold
  • Server sideStandard server-side check · one-time, short-lived tokens · hostname allow-list
  • PrivacyNo cookies, iframes or third-party requests · what is collected
  • ConsolePer-key analytics · create a key in the Orbit console
  • Free planNo limit on verifications · no limit on site keys
  • MoreOrbit Verify product page

Orbit Pages

Static sites, on your own domain.

  • PublishUpload the finished folder · no build step · every upload is a deploy that never changes
  • HostnameA hostname you own · certificate issued and renewed for you · the same edge rules Shield applies
  • Store tierUp to 50 MB and 5000 files · held centrally, cached by each point of presence on first use
  • Edge tierUp to 5 MB and 200 files · a copy on every point of presence, answered without fetching
  • Going backAn earlier deploy is a pointer move, not a rebuild · the edge cache is dropped at the same moment
  • It serves_redirects and _headers · your own 404.html, with a 404 status
  • Free plan20 projects

Tiers, deploys and what it serves →

Orbit Realtime

Voice and video rooms, joined by link.

  • Joinhttps://rtc.yunzheng.space/r/<room>
  • Embed<script src="https://rtc.yunzheng.space/v1.js"></script>
  • Nothing to installOpens in the browser people already have · no account for participants
  • On the doorPasscode · human verification at standard, strict or maximum · or no link at all
  • RoomsCreated in the console or over the API · one city per room, named in the console
  • Not recordedNothing said or shown in a room is stored
  • MoreOrbit Realtime product page
  • Free plan5 rooms · 25 people at once · 10,000 participant minutes a month

Orbit Stream

One broadcast in, watched from everywhere.

  • Publishrtmps://ingest-<city>.edge.yunzheng.space:1936/live
  • SoftwareServer address and key from the console, into the fields your broadcasting software already has
  • RTMPS onlyThe key travels with the connection, so the plain form is not offered at all
  • WatchingA hosted page or an HLS address · viewers get an identifier of their own, never the publishing key
  • DelayAbout 3–5 seconds behind, or about 15 on the steadier setting · plus a hold of up to 600 s that you set
  • QualityWhat you send is offered unchanged · up to 4 lower qualities made alongside it
  • AlsoRecordings · a watermark burned into every quality · a programme that plays when nobody is on air
  • Free plan2 channels · 1,000 minutes of broadcasting a month · 100 GB of delivery a month

Publishing, quality and how it is reached →

Orbit VOD

Upload it once. It plays at every size.

  • Playbackhttps://vod.yunzheng.space/a/<id>/master.m3u8
  • UploadSent in parts from the console or the API · an interrupted upload carries on from the part it stopped on
  • TranscodingOne pass on our own nodes makes the whole ladder · H.264 and AAC, six-second pieces, nothing scaled up
  • QualitiesFrom the resolution you upload downwards, never scaled up · the ceiling is set by the plan
  • PlayerAny HLS player takes the address · ours is two lines and adds a quality menu, picture-in-picture and statistics
  • PrivateA signed address that expires · sign it here, or hold a playback key and sign one per viewer in your own backend
  • Free plan100 videos · 50 GB of storage · 600 minutes of transcoding a month · 200 GB of delivery a month · up to 1080p

Uploading, qualities and playback →

Orbit Talk

Chat for a product, or for a broadcast.

  • Embed<script src="https://talk.yunzheng.space/v1.js"></script>
  • Two kindsA conversation keeps its history for the days your plan allows · live chat keeps the last few hundred lines in memory and writes nothing down
  • Who gets inA link with a passcode, and human verification if you want it · or link access off and entry tokens from your own backend
  • If it dropsEvery client carries a cursor, so it resumes where it left off — nothing repeated, nothing lost
  • Reading backHistory a page at a time over the API · every read lands in your account’s audit log
  • Free plan10 conversations · 200 people at once · 500,000 messages a month · 30 days of history
  • Not end to endTransport is encrypted; the machine holding the conversation can read it

Conversations, entry and the SDK →

Orbit Mail

Web mail on your organisation’s own domain.

  • For everyoneMailboxes, groups and aliases · everyone signs in with their YunZheng account
  • The mailboxConversations, labels, filters, undo send, snooze, search and offline
  • One consoleDomains, members, routing rules and delivery logs beside every other Orbit service
  • Free plan10 domains · 50 mailboxes · 50 groups

Mailboxes, groups and the console →

Orbit Meet

Video meetings in the browser, built on Realtime and Talk.

  • The roomWaiting room · screen sharing · chat and reactions · up to nine cameras on screen
  • HostsLive captions · polls and questions · breakout rooms · recordings
  • GuestsJoin from the link with a name, no account needed
  • Free plan5 meetings at a time · 100 people in a meeting · 50 recordings kept, with no time limit on meetings

Meetings, hosts and policies →

Orbit V-Gate

A hosted phone system for your organisation, answered in the browser with YunZheng Voice.

  • CallersIVR menus · ring groups · queues · business hours · voicemail
  • PeopleExtensions by email · browser, desk phones and phone apps ring together
  • LinesYour own phone lines or platform numbers · outbound calling by class
  • Free plan2 phone systems · 20 extensions · 5 calls at once · 10 YunZheng Voice numbers

Phone systems, lines and numbers →

Orbit Help

A customer help desk for your YunZheng ORG organisation, under your own name.

  • CustomersA portal on your address or your own domain · a site widget · knowledge base
  • AgentsTickets by department · SLAs · satisfaction surveys · seats from YunZheng ORG
  • EmailYour own mailbox becomes a channel · replies go through your own mail server
  • AllowanceFollows your organisation’s team plan

Portal, workspace and email →

Orbit S-Gate Coming soon

Business messaging from your own numbers: campaigns, codes and replies.

  • SendMarketing and notification texts · picture messages · up to ten recipients
  • CodesOne-time codes by text · a managed code flow is coming soon
  • ReportsDelivery status and replies on your webhooks · a message log in the console
  • Opt-outSTOP and START handled for every number

Business SMS and verification codes →

AS204921 address space

Every address we announce, and what runs on it.

  • PublishedThe prefixes and the service on each · nothing here is secret, so nobody has to guess
  • Route originEvery prefix carries a signed ROA for AS204921 · the same prefix from any other origin is not ours
  • In your logsThe resolvers answer queries and start nothing · a device of yours talking to them chose to
  • ReportingWrite to noc@as204921.net with the address, the timestamp and its time zone
  • Check itLooking glass · AS204921 on bgp.tools

Prefixes, reporting and route origin →

Orbit for providers

Reverse DNS and Shield inside your own panel.

  • The problemReverse DNS is only delegated on /24 boundaries · your customers buy /29s
  • How it worksDelegate the whole /24 to us once · hand each customer their own address range · each customer reaches only their own addresses
  • Your panelCustomers set their own hostnames on your site · they never see an Orbit sign-in
  • ProvisioningOrders create, suspend, resume and terminate the range · a drop-in module for the common billing platform, or JavaScript, Go and REST clients
  • Records staySuspension and termination never delete a customer’s records
  • Getting startedBy arrangement · open a ticket
02

Platform plans

Every product has a free plan of its own, counted per account. Below is each product's Free plan; the full Pro and Business tables are on each product's page.

Websites and network

  • DNS Hosting50 zones · 1,000 records per zone
  • Shield20 hostnames · 500 GB of transfer a month
  • Pages20 projects
  • Link10 tunnels
  • VerifyNo limit on verifications · no limit on site keys
  • RPKI2 certificate authorities · 200 ROAs

Video, voice and chat

  • Realtime5 rooms · 25 people at once · 10,000 participant minutes a month
  • Stream2 channels · 1,000 minutes of broadcasting a month · 100 GB of delivery a month
  • VOD100 videos · 50 GB of storage · 600 minutes of transcoding a month · 200 GB of delivery a month · up to 1080p
  • Talk10 conversations · 200 people at once · 500,000 messages a month · 30 days of history

For organisations

  • Mail10 domains · 50 mailboxes · 50 groups
  • Meet5 meetings at a time · 100 people in a meeting · 50 recordings kept, with no time limit on meetings
  • V-Gate2 phone systems · 20 extensions · 5 calls at once · 10 YunZheng Voice numbers

Every platform plan, product by product →

03

Network

AS204921

Sites, links and round-trip times come from the network-management platform and refresh every minute.

Every point of presence here was contributed. Sponsor a node to keep Orbit running.

04

Questions

What are the public resolver addresses?

IPv4 177.177.83.83 · IPv6 2602:f3ff:83::83 · DoH https://dns.yunzheng.space/dns-query · DoT dns.yunzheng.space port 853.

Which name servers do I point my domain at?

ns1.yunzheng.space and ns2.yunzheng.space — for a whole zone, a single hostname (NS records), or by CNAME.

Is DNSSEC supported?

Yes. Zones are signed online on every point of presence; the console shows the DS record for the parent.

Does the public resolver tell the sites I visit what network I am on?

For address lookups (A, AAAA, HTTPS and SVCB) it sends a shortened form of your address — at most a /24 for IPv4 and a /56 for IPv6 — to the authoritative servers of the name being looked up, so that services which answer by location answer for where you are rather than for where our own address is registered. It is not sent to the root or top-level servers, not with any other record type, and not for private addresses. A resolver in front of ours that asks for nothing to be passed on is honoured. The public resolvers keep no query log.

Can I offer reverse DNS to my own customers?

Yes. Reverse DNS is only delegated on /24 boundaries, while customers buy smaller blocks, so you delegate the whole /24 to ns1.yunzheng.space and ns2.yunzheng.space once and then assign each customer an address range inside it. Each customer can only change the records for their own addresses, and they do it inside your panel rather than in an Orbit account. Suspending or terminating a service never deletes their records. Access is by arrangement — open a ticket at helpdesk.yunzheng.space.

What does Orbit cost?

Orbit is run by a non-profit. Every product has a free plan of its own, counted per account — for example 50 zones and 1,000 records per zone on DNS Hosting, 2 phone systems and 20 extensions on V-Gate. The public resolver needs no account. The plans page lists every allowance; if you need more, open a ticket at the Help Centre.

Can I support Orbit?

Yes. Points of presence, transit and hardware come from sponsors. See StatisticsSponsor, or open a ticket at helpdesk.yunzheng.space.

How fast do changes propagate?

About 30 seconds to every point of presence.

Who operates Orbit?

YunZheng LAB, AS204921, a non-profit research network. Support: helpdesk.yunzheng.space.