AS204921 anycast 6 points of presence DNSSEC · RPKI

Anycast DNS, Shield and RPKI. One network.

Authoritative DNS with DNSSEC, a public resolver with DoH and DoT, Orbit Shield at the edge and an RPKI RTR feed — from every point of presence.

Open the console Learn more
01

Products

Orbit DNS Hosting

Anycast authoritative DNS.

  • Name serversns1.yunzheng.spacens2.yunzheng.space
  • ZonesForward and reverse (PTR) · DNSSEC signed online
  • OnboardingWhole zone · single hostname by NS · hostname by CNAME
  • RecordsGeo answers · weighted with health checks · apex ALIAS · HTTPS/SVCB · secondary DNS (AXFR, NOTIFY, TSIG)
  • Free tier5 zones · 50 records per zone · packs stack per account
  • PropagationAbout 30 s to every point of presence

Orbit Public Resolver

Public recursive DNS, unmetered.

  • IPv4177.177.83.83
  • IPv62602:f3ff:83::83
  • DoHhttps://dns.yunzheng.space/dns-query
  • DoTdns.yunzheng.spaceport 853
  • ResolutionIterative from the root · cached per point of presence
  • PrivateFiltered instances with block/allow lists and rewrites, by service pack

Orbit Shield

Anycast edge in front of your hostname.

  • EdgeWAF · cache with purge · automatic TLS · hidden origin · compression
  • RulesCountry / ASN / IP / ISP · browser check · Bot Fight Mode · rate limit · waiting room
  • EnableProxied record in a hosted zone, or CNAME onboarding
  • IncludedWith DNS Hosting · capacity = shield_hosts of your packs

Orbit RPKI

Route origin validation.

  • RTRRFC 8210 · TCP 323 / 8282 · about 1M validated ROAs · refreshed every 10 min · public
  • Hosted CAROAs for your own resources · console and REST API · RRDP and rsync
02

Service packs

PackZonesRecords / zoneFilter rulesDNS rewritesShield hostnamesCDN transferSecurity rules
Reading the pack registry…

Packs stack per account; limits add up. Public services are unmetered.

03

Network

AS204921

One set of anycast addresses, answered from every point of presence.

04

Questions

What are the public resolver addresses?

IPv4 177.177.83.83 · IPv6 2602:f3ff:83::83 · DoH https://dns.yunzheng.space/dns-query · DoT dns.yunzheng.space port 853.

Which name servers do I point my domain at?

ns1.yunzheng.space and ns2.yunzheng.space — for a whole zone, a single hostname (NS records), or by CNAME.

Is DNSSEC supported?

Yes. Zones are signed online on every point of presence; the console shows the DS record for the parent.

What does Orbit cost?

The public resolver, the RTR feed and the DNS Hosting free tier (5 zones, 50 records per zone, Shield on hosted domains) are free. Packs add limits on top.

How fast do changes propagate?

About 30 seconds to every point of presence.

Who operates Orbit?

YunZheng LAB, AS204921, a non-profit research network. Support: helpdesk.yunzheng.space.