A subscription-based Public Zone instance provides a guaranteed availability SLA, lower TTL values, and enhanced security protection. This service is ideal for individual and enterprise users with demanding DNS resolution requirements.
Edition comparison
We recommend purchasing a DNS security service to increase the DNS resolution peak limit and prevent resolution failures when the request volume reaches the limit.
For frequent batch changes to DNS records, use the DNS record backup feature to quickly revert incorrect changes.
The number of bound domains is calculated based on the number of primary domain names. If a subdomain is hosted independently, it is counted as one primary domain name.
Enterprise Standard Edition is no longer available for new purchases. Only existing customers can renew their subscriptions.
Alibaba Cloud DNS supports seamless instance upgrades. For more information, see Upgrade, detach, replace, or downgrade an instance.
Feature | Free Edition | Paid Editions | ||
Personal | Enterprise Ultimate | Exclusive | ||
Applicable scenarios | Business testing | For individual developers only. Note Enterprise-verified users cannot purchase new Personal Edition instances. Existing Personal Edition instances can still be used and renewed. | Ideal for enterprise customers across all industries. This edition provides more granular O&M capabilities and expert consulting services. | |
Availability SLA | No availability guarantee | 100% monthly availability | 100% monthly availability | 100% monthly availability |
Daily query limit | 100,000 queries per domain (Dynamic rate limiting may apply when exceeded) | Unlimited | Unlimited | Unlimited |
Dedicated support | None | DingTalk user support group | DingTalk user support group | 1-on-1 expert service 6 resolution change support requests per year 1 DNS architecture consultation per year |
DNS nodes | 4 in the Chinese mainland | 12 in the Chinese mainland, 15 outside China | 12 in the Chinese mainland, 15 outside China | 12 in the Chinese mainland, 15 outside China |
Subdomain hosting level | 16 | 16 | 16 | 16 |
DNS records per primary domain name | 100,000 | 100,000 | 100,000 | Unlimited* |
Subdomain levels | 10 | 20 | 20 | Unlimited* |
Minimum TTL | 600 seconds | 600 seconds | 1 second | 1 second |
Intelligent Resolution |
|
|
|
|
URL forwarding rules (per domain name) | 2 | 5 | 10 | Unlimited* |
Weight configuration (A, CNAME, and AAAA records) | Supported | Supported | Supported | Supported |
Alias records (per domain name) | × | × | 10 | Unlimited* |
Load balancing (IP address capacity per line per domain name) | 10 | 100 | 100 | Unlimited* |
Request statistics (subdomain level) | × | Supported | Supported | Supported |
IPv6 DNS | Supported | Supported | Supported | Supported |
Secondary DNS | × | × | Supported | Supported |
DNS record backup | × | × | Supported | Supported |
DNSSEC | × | Supported | Supported | Supported |
Domain names per instance | Not applicable | 1 by default, up to 100,000 | 1 by default, up to 100,000 | 1 by default, up to 100,000 |
DNS resolution peak (QPS) | Up to 20,000 | Up to 200,000 | Up to 200,000 | Up to 200,000 |
DNS attack protection | × | Optional Basic Protection or Full Protection | Optional Basic Protection or Full Protection | Full Protection included by default |
Note Unlimited*: If the default system limit is exceeded, you can apply to increase it provided that stable and secure product operation is ensured. | ||||
DNS attack protection
The Free Edition of Public Zone does not support DNS attack protection. Paid editions offer optional protection capabilities that you can purchase based on the required security level.
Security level | Specification | Description |
DNS Security | Basic Protection | Provides basic DNS attack protection for domains bound to a Public Zone instance. The protection limit for each domain name is 10 million QPS. |
Full Protection | Provides comprehensive DNS attack protection for domains bound to a Public Zone instance. The protection capacity for each domain name exceeds 100 million QPS, ensuring normal DNS resolution during DNS flood attacks. |
Starting October 30, 2025, new purchases or upgrades of paid Public Zone instances no longer offer the No Defense (with DNS Attack Risk) option. All paid instances include basic protection or full protection by default. Existing instances are not affected.