Changelog

The v1.0.0 release packages the DNScale cert-manager DNS-01 webhook for direct installation.

• Public Linux AMD64/ARM64 image: ghcr.io/dnscaleou/cert-manager-webhook-dnscale:v1.0.0.
• Public OCI chart: oci://ghcr.io/dnscaleou/charts/cert-manager-webhook-dnscale, version 1.0.0.
• A downloadable chart archive, SHA-256 checksums, and the immutable image digest are available on GitHub Releases.

Release checks verify anonymous artifact access, chart checksums, installation in Kubernetes, webhook availability, and restricted credential Secret access. The compatibility baseline remains Kubernetes 1.35.0 and cert-manager 1.19.3.

Follow the installation guide and validate certificate issuance with Let's Encrypt staging before using production.

The DNScale cert-manager webhook repository now includes the implementation, Dockerfile, Helm chart, and configuration examples.

• DNS-01 certificates: create and clean up ACME challenge TXT records for apex, hostname, and wildcard certificates through the DNScale API.
• Kubernetes configuration: use an Issuer or ClusterIssuer, with the API token stored in a Kubernetes Secret and access limited to named Secrets.
• Shared challenge records: preserve other TXT values when cleaning up a completed challenge, including when multiple certificates use the same name.
• Live validation: Let's Encrypt staging issuance for an apex and wildcard, renewal, and TXT cleanup passed with Kubernetes 1.35.0 and cert-manager 1.19.3.

The October 5 source release required building a container image and installing the chart from the repository. Update, October 9: v1.0.0 adds public Linux AMD64/ARM64 images and an OCI Helm chart for direct installation.

Read the announcement or follow the cert-manager setup guide.

Version 1.0.0 of the DNScale ExternalDNS webhook connects the upstream Kubernetes controller to the DNScale API.

• Manage A, AAAA, CNAME, and ownership TXT records, including multiple IP targets and TTL changes.
• Use explicit domain and zone filters with a stable TXT owner ID.
• Start with sidecar dry-run, then choose create-only, upsert-only, or sync.
• Install through the official ExternalDNS chart using the supplied values and public Linux AMD64/ARM64 container image.

The integration is tested with ExternalDNS 0.23.0, chart 1.23.0, and Kubernetes 1.35.0. Wildcard DNS names, routing policies, and apex CNAME flattening are outside this release's scope.

The sidecar's DNSCALE_DRY_RUN setting is enabled by default. The controller's dry-run flag is not forwarded through the webhook protocol.

Follow the installation guide or read the announcement.

Eligible DNS zones now include a Set up email with Postscale action. Choose application email or personal forwarding in Postscale, then return to DNScale to review the exact DNS changes and approve them with your existing zone permissions. You do not need to copy an API key.

The flow preserves unrelated records and existing DMARC, merges compatible SPF records, and asks separately before replacing existing MX. Application sending keeps your current incoming-mail provider. Postscale requires its own account; personal forwarding requires Starter or higher and uses an existing verified inbox. Sending approval and limits still apply.

See how setup works and read the announcement.

Version 1.0.0 is available for macOS, Linux, and Windows from GitHub Releases.

• DNS workflows: list, inspect, and create zones; create, update, and delete selected record values using opaque record IDs.
• Local validation: check record JSON from a file or stdin with --dry-run before making an API request.
• Inspection: read DNSSEC status, public DS records, and account/zone usage.
• Profiles and automation: OS-keychain profiles, environment authentication, JSON output, pagination, command deadlines, and shell completion.

Install on macOS or Linux with Homebrew:

brew install dnscaleou/tap/dnscale

Or install with Go 1.25 or newer:

go install github.com/dnscaleou/dnscale-cli/cmd/dnscale@v1.0.0

Release archives cover macOS and Linux on AMD64/ARM64 and Windows on AMD64, with SHA-256 checksums. The Homebrew tap installs Bash, Zsh, and Fish completions. Start with read-only commands and local dry-runs; practice writes in a disposable zone. Writes are never automatically retried.

Read the announcement, follow the CLI quickstart, or open the command reference.

Browse the CLI source and issues or the Homebrew formula.

Use the official Go SDK to manage DNS from services, command-line tools, and background jobs. It supports Go 1.25 and newer, with module path github.com/dnscaleou/dnscale-go.

• Zone and record management. Create, list, read, update, and delete resources with typed requests and responses.
• Pagination with Go iterators. Traverse zones and records with for range, fetching additional pages as needed.
• Deadlines and structured errors. Pass a context to each operation and inspect API errors, rate limits, and request IDs.
• Bounded retries for safe reads. DNS changes are never automatically retried.
• Wider API access. Use the generated client for DNSSEC, usage, account operations, and the rest of the public API contract.

Read the Go SDK announcement, follow the Go SDK guide, or browse the source repository.

Install the official Python SDK with python -m pip install dnscale. Version 1.0.0 supports Python 3.10 and newer.

• Zone and record management. Create, read, update, and delete DNS zones and records from Python, with typed responses and pagination helpers.
• Sync and async workflows. Use the same client in scripts, background jobs, and asynchronous applications.
• Explicit failure handling. Structured API exceptions and bounded retries for safe read requests; DNS changes are never automatically retried.
• Beyond zones and records. The included generated client exposes the wider API contract, including DNSSEC, usage, and account operations.

Read the launch announcement, follow the Python SDK guide, or browse the source on GitHub and package on PyPI.

The official @dnscale/dnscale version 1.0.0 is now published on npm. Build DNS automation in TypeScript and JavaScript on Node.js 20.19 and newer, using ES modules.

• Typed zones and records. Create, list, read, update, and delete resources with request and response types generated from the public API contract.
• Async pagination. Walk zones and records with for await...of, fetching additional pages as needed.
• Request control. Configure timeouts, pass an AbortSignal, and inspect API errors and rate limits.
• Bounded retries for safe reads. Create, update, and delete requests are never automatically retried.
• Wider API access. Use dns.api for typed operations beyond zones and records, including DNSSEC and usage.

Read the TypeScript SDK announcement, follow the TypeScript and Node.js guide, or browse the source repository.

DNS records can now include private comments for operational context and team notes.

• Dashboard and API. Add optional comments of up to 500 characters through the dashboard and REST API.
• Private context. Comments are private and are not published through DNS.
• Shared comments. One comment is shared across all record values with the same name and type.
• Predictable updates. Comments are preserved when omitted during API updates, or removed by submitting an empty comment.
• Dashboard visibility. Comments are displayed beneath record values in the dashboard.

DNScale DNS Control is available for selected accounts as a beta workflow for reviewing external authoritative DNS state before operational changes.

• External provider inventory. Track supported authoritative DNS providers and zones without changing live records.
• Snapshots and diffs. Capture normalized DNS state and compare changes across migration, cleanup, DNSSEC, or handoff work.
• Dashboard and API access. Work from the DNS Control dashboard section or the /api/dns-control reference.

During beta, connected providers remain read-only. Snapshots are review artifacts, separate from authoritative serving, secondary DNS, and live failover.

DNScale now includes customer-managed DNS traffic alerts for Scale and custom plans.

• Dashboard controls. Create and edit account or zone alert routes from the DNScale dashboard.
• Alerts API. Automate alert routing through /v1/alerts with alerts:read and alerts:write API scopes.
• Operational routing. Send notifications to email or webhooks, tune thresholds for QPS, NXDOMAIN, SERVFAIL, query drops, and refused-query volume, and use cooldowns to avoid repeated notifications.

DNScale Terraform Provider v1.0.1 is available for DNS-as-code workflows.

• Zone pagination. The dnscale_zones data source now reads through paginated API responses and returns one combined zone list.
• Safer record updates. Record name and type changes are treated as replacements, while content updates can follow the new API-returned record ID in Terraform state.
• DNSSEC CSK support. DNSSEC key management now accepts CSK keys, and DNSSEC status checks account for CSK keys correctly.
• Provider docs. Registry source examples, zone options, record TTL validation, local testing notes, and release notes were aligned with the current provider behavior.

DNScale refreshed several public product and documentation surfaces.

• Learning layout. Updated article and catalogue views for easier scanning.
• API docs navigation. Improved the API documentation shell and overview page.
• Landing feature sections. Reworked public feature modules to better show zone traffic, analytics, and workflows.

DNScale added more content for teams automating DNS workflows.

• DNS-01 guides. Added guidance for certificate validation with DNScale.
• DNS-as-code content. Published practical material for repeatable DNS changes.
• Provider integration notes. Added ecosystem guidance for teams connecting DNScale to existing tooling.

DNScale added public compliance resources for customers reviewing data protection requirements.

• DPA page. Published the DNScale Data Processing Addendum.
• Subprocessors register. Added a public list of subprocessors and relevant scope notes.
• Compliance links. Connected legal pages with GDPR and operational guidance.

The DNScale learning center grew into a broader DNS education surface.

• More guides. Added record-type explainers, operational DNS articles, and provider comparisons.
• Better article structure. Added clearer summaries, related guides, diagrams, and table-of-contents behavior.
• Full-text search. Added search across learning-center content.

API access can now be scoped more narrowly.

• Limit keys to selected zones. Create API keys that can only operate on the DNS zones they are assigned to.
• Clearer dashboard display. Zone-scoped keys show their scope in the API key management view.
• Better automation fit. Give scripts and integrations only the DNS access they need.

DNScale added a public tools surface for common DNS checks.

• DNS propagation checker. Inspect DNS answers from multiple locations.
• Zone health audit. Review common zone configuration issues.
• DNSSEC validator. Check whether a DNSSEC chain is valid and complete.

The tools are built for quick diagnostics before moving into the full managed DNS product.

DNScale added a clearer account closure workflow.

• Self-service closure. Account administrators can start closure from the app.
• Billing checks. Closure is blocked when outstanding billing items still need attention.
• Customer guidance. Added help content that explains what happens before and after closure.

DNS traffic analytics became more useful for day-to-day operation.

• Per-zone visibility. Added richer views of query activity by DNS zone.
• Latency insights. Added response timing views to help identify slow paths.
• Resolver context. Added clearer views of where resolver traffic is coming from.

DNScale made multi-provider DNS setups easier to evaluate and operate.

• Secondary DNS page. Added a dedicated product page for secondary DNS positioning.
• Multi-provider guidance. Published guidance for running DNScale alongside another authoritative DNS provider.
• Safer delegation workflows. Improved support for DNS setups that need third-party nameserver records.

DNScale expanded its authoritative DNS footprint.

• More regions. Added broader DNS edge coverage across key global regions.
• More local measurements. Expanded performance checks from major networks and user-facing locations.
• Public network messaging. Added a clearer public explanation of the DNScale global DNS network.

DNScale added a public view into DNS network performance.

• Network page. Published a public /network page for regional DNS latency.
• Map-based view. Added an easier way to inspect latency by region.
• Measurement explanation. Linked performance data to a plain-language guide on how the measurements are taken.

DNScale added stronger account protection options.

• Authenticator-app MFA. Customers can protect accounts with time-based one-time codes.
• Passkeys and security keys. Added support for hardware-backed and passkey-style authentication.
• Recovery codes. Added a recovery path for users who lose access to their primary MFA method.
• Hardened password reset. Password reset flows now have tighter verification and expiry behavior.

DNSSEC management became clearer inside the dashboard.

• Zone-level DNSSEC status. DNSSEC state is easier to see from zone views.
• Structured DS records. Delegation material is presented in a more useful format.
• Key lifecycle guidance. Added clearer support for understanding DNSSEC key status and rollover work.

DNScale added team collaboration features for accounts with more than one operator.

• Invitations. Invite team members into an existing account.
• Admin controls. Manage users from the dashboard.
• Per-zone permissions. Limit access so users only work with the DNS zones they need.

DNScale added more flexible billing options for customers who do not fit a fixed monthly package.

• PAYG plan. Added a metered option for usage-based DNS billing.
• Plan changes. Improved upgrades, downgrades, and paid-to-free transitions.
• Billing portal. Added a self-service way to manage payment methods and subscription details.

DNScale moved toward one product experience instead of separate public and app surfaces.

• One main domain. The product experience consolidated around dnscale.eu.
• Smoother dashboard access. Public pages and authenticated dashboard routes now live closer together.
• Cleaner navigation. The landing, pricing, docs, and dashboard flows became easier to move between.

Account access and plan boundaries became easier to trust.

• Email login verification. Added an extra email-based verification step for sensitive login flows.
• Cleaner signup experience. Improved redirects, verification responses, and first-login handling.
• Plan limit enforcement. Added clearer handling for zone and record limits so account usage matches the selected plan.

DNScale started the year with a stronger reliability surface.

• Service health visibility. Added clearer internal views of DNS, API, and infrastructure health.
• Faster incident detection. Expanded monitoring so operational issues are easier to spot before they affect customers.
• Customer-facing stability work. Improved the platform foundation behind zone management, DNS serving, and account workflows.