PD DNS Manager for WHMCS and Blesta

Manage DNS zones and records across every backend you use — Cloudflare, AWS Route 53, cPanel, PowerDNS and twelve more — with a type-aware editor, one-click DNSSEC, forwarding, zone backups, multi-server replication and a dedicated client self-service area, all inside WHMCS or Blesta.

One interface for every DNS backend

Connect any combination of sixteen providers and manage them through a single WHMCS or Blesta panel. Credentials are encrypted at rest; a test-connection button confirms they work before you save.

• Cloudflare, AWS Route 53, DigitalOcean, Google Cloud DNS, Azure DNS, OVH, Hetzner DNS, Gandi LiveDNS, deSEC, DNSimple, Vultr DNS — cloud DNS APIs
• cPanel/WHM (incl. a DNSONLY/cluster nameserver), Plesk, DirectAdmin — control-panel backends
• PowerDNS, BIND 9 — self-hosted authoritative servers

Already running zones at a provider before you connected it? Zone adoption finds them and offers to bind every one that matches an active WHMCS or Blesta domain or service to the right client, automatically — nothing at the provider is touched in the process.

Fast, server-side grids

Zone and record lists page, search and filter on the server — a zone with thousands of records loads in the same time as one with ten.

• Filter by provider, status, record type or name — across your entire zone fleet
• Type-aware record editor — shows only the fields each record type needs; validators prevent a bad record from being saved
• 15 record types — A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, CAA, PTR, TLSA, SSHFP, NAPTR, DS, DNSKEY
• Record templates with merge fields — {domain}, {sld}, {tld}, {ns1}–{ns5}, {ip} resolve per zone, so one template serves every customer
• One-click Quick set-ups — Google Workspace, Microsoft 365 or an SPF lockdown, applied in a click

DNSSEC, guardrails and bulk operations

The automated layer that keeps your DNS fleet healthy and your customers inside the lines.

• One-click DNSSEC — sign a zone and get the DS records to paste at your registrar; hidden where it can't work
• BIND import and export — download any zone as a standard zone file; import one to bulk-add records
• Content policies — block record content by pattern, restrict or deny the IPs a customer's A/AAAA record may point at
• Zone locking — freeze a zone against customer edits with one click while you intervene
• Per-record-type limits and default TTLs — cap record counts by type and pre-fill TTLs, per WHMCS or Blesta product
• Zone health and sync monitoring — background checks flag drifted or unresponsive zones; the health pill updates on each cron
• Cross-zone bulk operations — find, replace, delete or re-TTL records across dozens of zones with one regular expression, and see the exact before/after preview before anything changes
• Orphan management — flags zones whose WHMCS or Blesta service has lapsed; records at the provider are never deleted unless you opt in

Forwarding, cache and redundancy

• Website and email forwarding — URL redirects and mailbox/catch-all forwarding on supported providers, for domains that don't need hosting; coexistence checks warn before overriding a host already in real use
• Cache purge and per-record CDN proxy toggle — clear a zone's edge cache and route individual records through Cloudflare's proxy, right from the record editor
• Multi-server replication — continuously mirror zones from one configured provider to another for a live, always-current secondary

Sell DNS, migrate it in, automate it

• Per-product quota packages — sell "N zones" (and cap records per zone, by type) by linking a quota package to your WHMCS or Blesta products; the allowance is enforced automatically
• DNS migration — import zones from BIND zone files, a master via zone transfer (AXFR), or move zones between your own configured providers with a verified dry run
• Secondary (slave) zones — host AXFR-fed secondaries on PowerDNS and BIND 9
• Registrar-DNS takeover per TLD — auto-create the zone and point nameservers at you when a domain in a chosen TLD is registered or transferred
• Scoped REST API — read-only or read/write tokens, IP-restricted and rate-limited, for deploy pipelines, ACME hooks and monitoring
• Deleted a zone by mistake? Restore its latest backup snapshot and it comes right back

Client self-service in your theme

Your customers manage their own DNS inside the client portal — no separate login, no control panel access to hand out.

• Same type-aware editor the admin uses, scoped to each client's own zones, plus one-click Quick set-ups
• Client-initiated zone backups — customers take and restore their own snapshots without a support ticket
• DNSSEC status and DS records (on supported providers), BIND zone file download
• Configurable access for domain-only customers — full editing, view-only, or hidden, independent of hosting customers