Secondary DNS Terms

Secondary DNS Hosting — Terms of Service

Last updated: January 14, 2026

These terms govern your use of le_dns Secondary DNS Hosting service. By registering or using the service, you agree to these terms. For the public resolver service, see Resolver Terms.

1. Service Description

le_dns provides secondary DNS hosting (slave zones) with the following features:

Multi-geographic nameservers: ns1.ledns.eu (51.83.90.178) and ns2.ledns.eu (51.89.103.206)
TSIG-authenticated zone transfers: HMAC-SHA256 secure authentication
Automatic zone updates: Receives NOTIFY from your primary DNS and pulls updates via AXFR/IXFR
Web UI + REST API: Manage zones via web interface or programmatic API
Domain verification: TXT record verification ensures domain ownership

Service Level

The service is provided on a best-effort basis with no formal SLA. We target:

99.5% availability per nameserver
99.9% aggregate availability

Note: These are targets, not contractual guarantees. This is currently a free service (may introduce paid SLA tiers in the future).

2. Customer Obligations

As a customer, you must:

Maintain a functional primary DNS server that responds to zone transfer requests
Update zone serials when making changes (we rely on SOA serial increments)
Secure TSIG keys: Keep your TSIG secret confidential (we hash API keys but you must protect TSIG secrets)
Respond to abuse complaints within 48 hours (sent to your registered email)
Comply with laws: No illegal content (phishing, malware, CSAM, copyright infringement, etc.)
Configure correct NS records: Your domain’s NS records must point to ns1.ledns.eu and ns2.ledns.eu

3. Domain Verification

Before TSIG credentials are revealed, you must verify domain ownership:

Add a TXT record at _ledns-verify.yourdomain.com with the provided token
Click “Verify” in the web UI or call the API verification endpoint
We query authoritative DNS to confirm the TXT record exists
Once verified, TSIG credentials become visible and zone transfers are enabled

Why? Prevents unauthorized users from registering domains they don’t own.

4. TSIG Key Management

Key format: customer-[uuid].[domain] with HMAC-SHA256 algorithm
Key security: You are responsible for securing your TSIG secret (treat it like a password)
Key rotation: Contact support@ledns.eu to rotate keys
Lost keys: If lost, delete the zone and re-register (generates new credentials)

5. Zone Limits & Quotas

Default limit: 100 zones per customer account
Records per zone: No hard limit (reasonable use expected)
Zone size: No hard limit, but extremely large zones (>10MB) may require review
Quota increases: Contact support@ledns.eu for increases

For Secondary DNS hosting:

Your role: Data Controller (you own the domain data)
Our role: Data Processor (we host and serve your zones on your behalf)
Data Processing Agreement (DPA): See Data Processing Agreement for GDPR Article 28 compliance
Privacy Policy: See Privacy Policy for details on how we handle account data

Data we process: Email address, domain names, primary DNS IP, TSIG keys, zone data (DNS records).

7. Service Suspension & Termination

7.1. Suspension by Us

We may suspend or terminate zones immediately if:

Illegal content detected: Phishing, malware, CSAM, copyright infringement, etc.
Abuse complaints received and not resolved within 48 hours
Terms violations: Failure to maintain primary DNS, non-responsive to contact
Legal requirements: Court orders or government requests

7.2. Termination by You

You may delete zones at any time via web UI or API. Deleted zones are:

Moved to archive for 30 days (recovery window)
Permanently deleted after 30 days
TSIG keys invalidated immediately upon deletion

7.3. Non-Abuse Suspensions

For non-abuse reasons (e.g., service discontinuation), we will provide 7 days notice via email.

8. Fees & Pricing

The service is currently free of charge. We reserve the right to:

Introduce paid tiers in the future (with SLA guarantees)
Provide 30 days notice before any pricing changes
Grandfather existing free users or offer migration paths

If pricing is introduced, you’ll have the option to accept or migrate to another provider.

9. Support

Email support: support@ledns.eu
Response time: Best effort, typically <48 hours
Emergency contact: abuse@ledns.eu for critical abuse issues

Support is provided in English and French.

10. Warranties & Liability

Service is provided “as is” without warranties. We are not liable for:

Service interruptions or downtime
DNS resolution failures
Data loss (backup your primary DNS!)
Indirect, consequential, or incidental damages
Loss of business or revenue due to service issues

Your responsibility: Maintain backups of your zone files. We are secondary DNS only — you must maintain your primary.

11. Acceptable Use

You may NOT use the service for:

Phishing, malware distribution, or CSAM hosting
Copyright infringement or piracy
Spam or unsolicited bulk email infrastructure
DDoS command-and-control domains
Any illegal activity under French or EU law

12. Changes to Terms

We may update these terms at any time. Changes effective immediately upon posting. We will notify registered users via email for material changes.

13. Governing Law

These terms are governed by French law. Disputes subject to exclusive jurisdiction of French courts.

14. Contact

Support: support@ledns.eu
Legal: legal@ledns.eu
DPA questions: legal@ledns.eu