Delegate a subdomain to another DNS provider

05.11.2026
Skip to main content
< Zurück
Du bist hier:
Drucken

Delegate a subdomain to another DNS provider

Delegate a subdomain to another DNS provider

If you want to manage a single subdomain, for example acme.yourdomain.ch, with another DNS provider (such as deSEC or Cloudflare), you delegate it with NS records. The domain itself and all other records stay with FireStorm.

What you need: the name servers of the other provider (usually two) and, if the subdomain should be secured with DNSSEC, the DS record shown by the provider.

Create the NS records

  1. Log in at https://admin.firestorm.ch.
  2. Open the DNS entries of your domain as described in the article Change DNS entries.
  3. Click Add Record.
  4. Select NS as the type. In Name, enter only the part in front of your domain, so acme and not acme.yourdomain.ch. In Name server, enter the first name server of the provider and click Add.

Create an NS record for a subdomain

  1. Repeat this for every further name server of the provider, always with the same name.

You will then see the new NS records in the list:

NS records of the subdomain in the list

The delegation is active on our name servers immediately. From now on, the other provider answers all queries for the subdomain. You therefore create further records for acme.yourdomain.ch there, no longer at FireStorm.

DNSSEC: create the DS record

Your zone at FireStorm is signed with DNSSEC. If the delegated subdomain should be signed as well, also create the DS record shown by the other provider. Without a DS record the subdomain still works, it is simply not signed.

  1. Click Add Record and select DS as the type.
  2. In Name, enter the same name as for the NS records, so acme.
  3. Copy Key tag, Algorithm, Digest type and Digest exactly as shown by the provider and click Add.

Create a DS record for a delegated subdomain

Important: A wrong DS record makes the subdomain unreachable for many visitors because DNSSEC validation fails. Copy the values exactly. If the provider changes its key, update the DS record. You can only create the DS record once NS records with the same name exist.

What is not possible

  • The NS records of the domain itself (name @) are managed by FireStorm. They appear in the list without an edit or delete button. If you want to move the whole domain to another DNS provider, change the name servers of the domain in the domain management of the customer portal, not in the DNS entries.
  • NS and DS records for the domain itself or for wildcards (*) are not possible.
  • NS records cannot be created in Plesk (DNS manager in the hosting). Use the customer portal for this.
FireStorm
Related Post