Bunny traffic engine removes query fees today

Bunny DNS now handles nearly 200 billion queries monthly while eliminating all query fees for users. This move transforms Bunny DNS from a paid utility into a fundamental, cost-free layer for modern cloud infrastructure. The platform uses its dual-stack anycast network to route traffic efficiently without charging for volume.

The smart routing engine leverages latency data and health checks to optimize performance beyond simple record lookups. Its global edge architecture spans 119 locations, supporting this massive scale. You can migrate up to 500 domains to this unlimited free hosting model immediately.

The shift removes per-request billing entirely, ensuring that sudden traffic spikes do not result in unpredictable costs. By making these core features accessible, bunny.net positions DNS as an entry point rather than a premium add-on. This strategy reinforces the company mission to make the internet hop quicker for over 1.5 million websites currently on their network.

The Strategic Role of Free Smart DNS in Modern Cloud Infrastructure

Bunny DNS as a Smart Routing Engine Beyond Directories

Static IP directories are obsolete. Bunny DNS operates as a flexible traffic orchestration layer, powering over 300,000 domains globally by driving intelligent path selection across a worldwide network. Traditional resolvers return fixed records; this system employs Smart Records to direct users based on real-time latency and geographic proximity. Such architecture supports modern SVCB records, enabling applications to negotiate connection parameters and certificate validation directly during the resolution phase. Security integration further distinguishes this engine through DNSSEC implementation with NSEC Black Lies. This specific configuration validates zone integrity while preventing enumeration attacks that expose entire domain structures to reconnaissance.

Logic-based resolution introduces a dependency on the decision node's availability, but eliminating query fees removes the financial penalty for high-frequency polling. This change encourages granular, responsive traffic management policies that static systems cannot match.

Deploying Unlimited Queries Across 500 Free Domains

Organizations manage high-traffic portfolios by using unlimited queries across 500 domains without incurring per-request billing. This architectural shift removes the financial penalty associated with DNS resolution spikes, allowing operators to prioritize smart routing logic over cost containment strategies. Determining when to use smart DNS records becomes a question of performance optimization rather than budget approval, as the platform analyzes latency data to direct traffic dynamically. The elimination of usage-based charges means that deploying 1-Click Acceleration to spin up CDN pull zones directly from DNS records carries no query overhead. InterLIR observes that this model encourages broader adoption of modern record types like SVCB and HTTPS, which optimize client connections without fear of billable lookup events. This structure supports scalable infrastructure by ensuring query volume no longer dictates costs.

Removing query fees fundamentally alters the risk profile for deploying complex DNS logic. Operators can now enable aggressive health monitoring and geographic load balancing without calculating the cost of additional lookups during failover events. This approach ensures that DNS hosting serves as a strong foundation for global internet infrastructure rather than a variable cost center. The constraint shifts from financial caps to technical configuration limits, demanding precise management of the allowed domain count.

Navigating the Minimum Spend and Hidden Billing Thresholds

The monthly minimum spend applies if any paid service activates alongside the free DNS tier. While the platform eliminates query fees entirely, it enforces a global minimum charge across all services to maintain an active account. This structure prevents unexpected billing surprises for operators integrating smart routing with storage or CDN capabilities. Previously, the free tier allowed the first several million normal calls before charging, creating a variable cost model. The current fixed threshold simplifies budgeting but requires awareness that accounts using multiple platform features must meet this baseline spend. Operators gain predictability while maintaining access to a unified platform. This cost structure ensures network stability while removing per-request volatility. The billing threshold establishes a minimum usage level for accounts combining DNS with other Bunny.net services.

Inside the Smart Routing Engine and Global Edge Architecture

Latency-Based Routing and JavaScript Logic in Smart DNS

Every DNS query passes through an engine that checks real-time latency data before returning an address. This mechanism identifies the fastest available endpoint instantly. Bunny DNS originated as a tool to direct traffic to optimal destinations by analyzing each request individually. Traditional systems often rely on static round-robin distribution, a method that ignores current network congestion or server load. Developers now apply JavaScript to determine request routing dynamically based on custom logic. Operators script complex failover scenarios or traffic shaping rules that execute at the network edge.

InterLIR notes that shifting resolution logic to JavaScript introduces a constraint between granular control and script execution latency. A syntax error in a custom routing script halts resolution for all users, whereas static records offer predictable reliability. Debugging routing issues requires inspecting code logic rather than just checking record propagation. This architectural evolution transforms DNS from a simple lookup table into a programmable traffic cop.

Dual-Stack IPv4/IPv6 Resolution and Modern Record Support

Bunny DNS operates on a dual-stack anycast network, ensuring nameserver records resolve over both IPv4 and IPv6 by default without manual configuration. This architecture eliminates the migration burden for operators while maintaining strict alignment with modern internet infrastructure where IPv6 adoption continues to rise. Support extends to HTTPS and SVCB records, which provide clients with critical hints for optimizing connection parameters before the TCP handshake occurs. The system also handles TLSA records for DANE validation, securing certificate chains directly within the DNS response path.

InterLIR observes that integrating health checks with these modern record types allows smart routing to fail over based on actual service availability rather than simple IP reachability. Unlike standalone DNS solutions that treat resolution as a static lookup, this approach unifies routing logic with CDN performance data. A notable tension exists between rapid failover and cache TTLs; aggressive health monitoring can trigger frequent record updates, potentially increasing load on resolvers that ignore low TTLs. Operators must balance responsiveness with the stability expectations of downstream caches. The inclusion of CDS and CDNSKEY records further automates DNSSEC key rollovers, reducing the risk of validation failures during maintenance windows. This thorough record support transforms the DNS layer from a passive directory into an active component of application delivery logic.

DNSSEC Validation Risks and NSEC Black Lies Protection

Standard DNSSEC validation exposes zone topology through NSEC records, enabling attackers to enumerate every subdomain in a single query. This structural leak occurs because traditional NSEC chains explicitly list the next existing name, effectively publishing a map of the entire domain infrastructure. Operators deploying validation without mitigation inadvertently reveal internal service names and testing environments to public scrutiny.

Bunny DNS addresses this vulnerability by implementing NSEC Black Lies, a technique that generates synthetic responses to hide the true zone structure while maintaining cryptographic integrity. This approach ensures that validation queries return signed responses that appear valid but do not disclose actual record existence or non-existence patterns. The result is full DNSSEC protection against tampering without the privacy trade-off of zone walking.

InterLIR notes that hiding zone data prevents reconnaissance attacks that often precede targeted DDoS campaigns. Automating key management with CDS and CDNSKEY records reduces the operational burden of regular key rotation. Four years ago, the company turned this internal system into a user-facing product, embedding these advanced security features directly into the free tier. Operators migrating from legacy providers can use automatic zone scanning to reconstruct records safely, avoiding manual configuration errors that frequently break DNSSEC chains during migration.

Migrating to Unlimited Free DNS Hosting in Five Steps

Automatic Zone Scanning and BIND File Upload Mechanics

Bunny DNS reconstructs zones by scanning a domain's most common record names and types to enable immediate migration. Users can also upload a BIND file directly, bypassing manual entry for complex configurations entirely. This dual approach minimizes downtime during the transition from legacy providers to modern infrastructure.

1. Navigate to the DNS dashboard and select the option to add a new zone.
2. Choose automatic scanning to detect existing records or select the BIND upload method.
3. Verify the reconstructed zone data before publishing changes to the global anycast network.
4. Apply 1-Click Acceleration to spin up a Pull Zone instantly after records propagate.

The automatic scanning process checks standard record types but may miss custom or obscure entries requiring manual verification. Relying solely on detection without reviewing the output risks propagating outdated routing logic into the new environment. Operators should validate that HTTPS and SVCB records align with current application requirements before finalizing the move. The platform supports modern record types including HTTPS, SVCB, and TLSA as part of its ongoing development. The tension between migration speed and configuration accuracy requires operators to balance rapid deployment with rigorous post-migration auditing.

Enabling 1-Click Acceleration and Security for Immediate Gains

Activating 1-Click Acceleration instantly provisions a Pull Zone directly from existing DNS records. This mechanism routes traffic through the edge network without requiring separate CDN configuration steps. Operators gain immediate caching benefits while maintaining a single control plane for both resolution and delivery. The integration eliminates the latency typically introduced by managing distinct routing and acceleration layers.

Apply protection measures using 1-Click Security to enable Bunny Shield at the domain level. This feature filters malicious traffic and absorbs DDoS attacks before they reach the origin infrastructure. Common exploits are blocked automatically based on real-time threat signatures updated across the global network. These security and performance features are included without query limits or hidden enterprise tiers.

1. Access the dashboard and locate the specific domain zone requiring optimization.
2. Toggle the acceleration switch to spin up the associated Pull Zone automatically.
3. Enable the security module to begin filtering edge traffic and blocking exploits.
4. Verify that records resolve correctly through the new protected edge path.

This unified approach transforms DNS from a passive directory into an active performance and security gateway. The CDN Acceleration capability ensures traffic follows the optimal path immediately upon activation.

DNSSEC Enablement and Modern Record Type Verification

Enable DNSSEC on Bunny DNS by activating the single toggle within the zone management interface to sign records immediately.

The implementation uses NSEC Black Lies to provide validation and protection against tampering without exposing the entire domain structure. Unlike standard NSEC, this mechanism synthesizes responses that hide internal topology yet satisfy cryptographic validators. This approach maintains chain validity while preventing zone enumeration, offering significant privacy against reconnaissance.

Validate support for modern types including HTTPS, SVCB, and TLSA to ensure compatibility with contemporary client stacks. These records allow applications to negotiate parameters before the TCP handshake, reducing latency. The platform natively supports these advanced record types alongside automatic zone scanning to reconstruct configurations accurately. For detailed feature specifications, review the modern record types documentation. InterLIR recommends testing validation paths in a staging environment before production cutover. Ensure your migration strategy from legacy providers includes a full audit of these cryptographic and performance-oriented records.

Measurable ROI and Security Gains from Integrated DNS and CDN

Defining the Zero-Fee DNS Query Model

Eliminating variable query fees removes the penalty on traffic growth. Converting DNS into a fixed-cost foundation grants budget certainty while retaining smart routing capabilities. Removing query limits allows infrastructure to scale without the administrative burden of tracking request counts against tiered thresholds. Health monitoring and DDoS protection are included by default. Granular per-query cost attribution disappears, a metric some financial departments use for internal chargebacks, yet the reduction in administrative complexity outweighs this accounting preference. A flat-fee structure aligns financial incentives with business growth rather than punishing success with higher bills. Global networks handling nearly 200 billion queries monthly prove that removing friction at the resolution layer accelerates adoption of secure, modern record types.

Application: Deploying Free DNS Hosting for 500 Domains

Switching to Bunny DNS uses a routing engine powering over 1.5 million websites without incurring query fees. This tier supports up to 500 domains per account, removing financial friction during high-volume traffic spikes. Operators deploy by uploading a BIND file or using automatic zone scanning to reconstruct records instantly. The platform acts as a smart routing layer, analyzing latency data to direct users optimally instead of serving static address lists.

• Migrate existing zones using the automated scanner to detect common record types.
• Enable DNSSEC with NSEC Black Lies to prevent zone enumeration attacks.
• Activate 1-Click Acceleration to provision a Pull Zone directly from DNS records.
• Consolidate routing logic and content delivery into a single control plane.

Teams previously managed separate vendors for resolution and acceleration, introducing configuration drift and latency. The DNS service incurs no usage charges, though broader infrastructure usage triggers the baseline billing threshold. High-traffic sites benefit most because the elimination of per-request billing allows unlimited query volume without budget caps. Enterprises seeking to consolidate their network edge while eliminating variable DNS costs find this configuration ideal.

Validating Enterprise Features Without Hidden Costs

Stakeholders switch to Bunny DNS because smart records and health monitoring remain fully accessible without enterprise upgrades. The platform embeds these capabilities directly into core infrastructure for all users, ensuring no critical features are hidden behind enterprise plans. Operators verify geographic routing functionality immediately upon zone creation, directing traffic to the fastest endpoint automatically. Raw logging and advanced analytics incur no hidden fees, features often monetized separately by other providers.

Feature richness often conflicts with cost predictability; many vendors restrict necessary observability tools to paid tiers, forcing costly upgrades during incidents. Bunny DNS treats routing intelligence as a baseline requirement rather than a luxury. This approach prevents scenarios where emergency scaling triggers unexpected billing shocks due to feature unlocking. Validating that no critical path dependencies exist on paid modules before migration ensures a smooth transition. Teams gain full control over traffic distribution without negotiating budget approvals for basic durability tools.

References

• We’re making Bunny DNS free: We applied our traditional
• RIPE NCC is planning a full rebuild of its
• At the West Africa Peering Forum, in Cotonou, Benin
• As governments, economies and essential services become ever more
• This means that a user’s mobile ... 50 KM
• Linux Foundation Announces Intent to Launch Agent Name Service