How to activate DNSSec on my hosting

What is DNSSEC?

DNSSEC(Domain Name System Security Extensions) is a set of security extensions designed to protect the DNS protocol by adding digital signatures and advanced cryptography, in other words, DNSSEC adds an additional layer of security to the domain resolution process, ensuring that the data received comes from a legitimate source.

Why DNSSEC is important and what benefits it has:

To understand the importance of DNSSEC, we must first understand how DNS(Sistema de Nombres de Dominio), works, which is a fundamental technology for the functioning of the Internet. The DNS is the system that allows us to translate the domain names we use (such as www.swhosting.com) into IP addresses, which computers use to communicate with each other, however, the traditional DNS is vulnerable to several types of attacks, such as:

• Domain spoofing: The attacker can redirect traffic from a legitimate website to a malicious server.
• Cache Poisoning: The attacker can modify the information stored in DNS servers, leading to users being directed to fake websites.
• Among other spoofing and spoofing attacks.

By incorporating DNSSEC at the DNS level, it provides several benefits, such as:

1. Protection against cache poisoning attacks: DNSSEC ensures that DNS server responses come from a legitimate source, which prevents attackers from injecting fake data.
2. Data integrity: DNS records are not altered in transit, ensuring that data is not modified during transmission.
3. Authenticity of origin: The data we receive from the DNS server comes from a verified and authorised source.

Installing DNSSEC on your Web Hosting

Prerequisites

If you have hosting on a server managed by SWPanel or have a Smart Hosting plan, you can enable DNSSEC easily and quickly. However, you must meet the following requirements:

For main domains:

1. The domain must be registered with SWPanel.
2. The domain must not be expired, ensure that the domain is registered and active.
3. Hostnames must be managed by SWPanel, you must use DNS servers managed through SWPanel, such as "dns3.swhosting.com" and "dns4.swhosting.com".
4. The hosting must be on a server running Debian 12 or later.
5. The domain must not have Cloudflare enabled.

For subdomains:

1. The main domain must have an active DNS Hosting Plan. This is necessary because DNSSEC can only be enabled on domains that are properly managed within SWPanel.
2. DNSSEC must be enabled on the main domain. If the main domain does not have DNSSEC, the subdomain will not be able to enable it either. You can check and enable this option in your domain settings within SWPanel.
3. The main domain must be in your SWPanel domain portfolio. You can only manage DNSSEC on domains that are registered and administered within your SWPanel account.
4. The DNS management of the main domain must be done from SWPanel. If the main domain has its DNS servers with another provider, it will not be possible to enable DNSSEC on the subdomains from SWPanel.

Install DNSSEC on your Web Hosting

Log in to SWPanel and go to the Dashboard of your service:

💡 Use the search engine at the top to quickly locate your service.

In the Available Upgrades (top right section) activate the DNSSEC option:

Once selected, the next step is to click the Activate Now button

Done! In a matter of minutes, your DNSSEC Hosting.

To enable DNSSEC on a subdomain, the process is identical to that of a main domain, with the only difference being that the main domain must have DNSSEC enabled beforehand.