> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xloud.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Admin Guide

> Administer Xloud DNS infrastructure — configure backend drivers, manage pools, control zone transfers, enforce quotas, and secure the DNS service.

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Overview</p>

This guide covers platform-level administration of the Xloud DNS service. Administrators
configure the backend DNS driver, manage server pools that process zone data, control
zone transfer policies, set per-project quotas, and maintain the security posture of
the DNS infrastructure. All operations require administrator privileges.

<Warning>
  **Administrator Access Required** — This operation requires the `admin` role. Contact your
  Xloud administrator if you do not have sufficient permissions.
</Warning>

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Topics in This Guide</p>

<CardGroup cols={4}>
  <Card title="Architecture" icon="network" href="/services/dns/architecture" color="#197560">
    DNS service topology — API layer, central processing, and backend nameserver pools
  </Card>

  <Card title="Backend Configuration" icon="settings" href="/services/dns/backend-config" color="#197560">
    Configure the backend DNS driver and pool targets through XDeploy
  </Card>

  <Card title="Zone Transfers" icon="share-2" href="/services/dns/zone-transfers" color="#197560">
    Manage AXFR and IXFR zone transfer requests between projects and secondary nameservers
  </Card>

  <Card title="Pool Management" icon="server" href="/services/dns/pool-management" color="#197560">
    Manage nameserver pools, attributes, and geographic distribution
  </Card>

  <Card title="Quotas" icon="gauge" href="/services/dns/quotas" color="#197560">
    Set and manage per-project DNS resource limits
  </Card>

  <Card title="Security" icon="shield" href="/services/dns/security" color="#197560">
    Harden DNS infrastructure — restrict zone transfers, protect apex records, manage DNSSEC keys
  </Card>

  <Card title="Troubleshooting" icon="wrench" href="/services/dns/admin-troubleshooting" color="#197560">
    Diagnose API outages, propagation failures, and nameserver inconsistencies
  </Card>
</CardGroup>

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Prerequisites</p>

<Note>
  **Required before proceeding**

  * Administrator credentials sourced via `openrc.sh`
  * Access to XDeploy for DNS service configuration
  * Understanding of DNS protocol fundamentals (SOA, NS delegation, AXFR/IXFR)
</Note>

***

<p style={{ fontSize: '1.25rem', fontWeight: 700, marginBottom: '0.75rem' }}>Next Steps</p>

<CardGroup cols={4}>
  <Card title="DNS User Guide" icon="book-open" href="/services/dns/user-guide" color="#197560">
    Step-by-step instructions for managing zones and records
  </Card>

  <Card title="Load Balancer Admin Guide" icon="shield-check" href="/services/load-balancer/admin-guide" color="#197560">
    Administer load balancer infrastructure and quota management
  </Card>

  <Card title="Key Manager" icon="lock" href="/services/key-manager/admin-guide" color="#197560">
    Manage DNSSEC signing keys and TLS certificate secrets
  </Card>

  <Card title="Identity" icon="fingerprint" href="/cli-setup" color="#197560">
    Configure RBAC policies for DNS zone management
  </Card>
</CardGroup>