Public Zone Overview

A public zone provides information to translate a domain name and its subdomains into IP addresses required for network communications over the Internet. Visitors can access your website by entering a domain name in the address box of a browser. To use Huawei Cloud DNS for public domain name resolution, create a public zone for your domain name, and add record sets to map your domain name to one or more IP addresses.

Table 1 describes the operations required for creating and managing public zones.

**Table 1** Public zone operations
Operation	Scenario	Constraints
Creating a Public Zone	Create a zone for your domain name.	Public zones are global resources. You do not need to select a region or project. Each account can have up to 50 public zones. The domain name can be a second-level domain name (for example, example.com) or one of its subdomains (for example, abc.example.com).
Managing Public Zones	Modify, delete, enable, disable, and view public zones.	The domain name of a created public zone cannot be modified. If a public zone is deleted, all its record sets will also be deleted. If a public zone is disabled, all its record sets will not take effect.
Reclaiming a Public Zone	Reclaim a public zone by proving that you are the holder of the domain name to Huawei Cloud when message "This public zone has been created by another account" is displayed when you create a public zone.	The domain name has already been registered with a third party registrar. Only the domain name holder can reclaim the public zone.
Configuring DNSSEC	Use digital signatures to ensure the authenticity and integrity of DNS response packets, protect end users from being redirected to unexpected addresses, and prevent attacks such as DNS spoofing and cache pollution.	DNSSEC does not support subdomains. Before disabling DNSSEC, delete the DS record from the domain name service provider. When transferring DNS record sets across accounts on the DNS console, you need to delete the DS record from the domain name service provider and then disable DNSSEC on the DNS console. Otherwise, the resolution may fail. Before transferring a domain name across accounts on the Domains console, you need to delete the DS record and then disable DNSSEC on the DNS console. Otherwise, the resolution may fail.