---
name: dns-svcs-getting-started
title: Getting started with IBM Cloud DNS Services
description: IBM Cloud® DNS Services provides private DNS to Virtual Private Cloud (VPC) users. Private DNS zones are resolvable only on IBM Cloud, and only from explicitly permitted networks in an account. To get started, create a DNS Services instance using the IBM Cloud console.
last-updated: 2025-06-03
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/dns-svcs?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Getting started with IBM Cloud DNS Services
{: #getting-started}

IBM Cloud® DNS Services provides private DNS to Virtual Private Cloud (VPC) users. Private DNS zones are resolvable only on IBM Cloud, and only from explicitly [permitted networks](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-dns-concepts&format=markdown#permitted-networks) in an account. To get started, create a DNS Services instance using the IBM Cloud console.
{: shortdesc}

## Before you begin
{: #before-you-begin-getting-started}

To use DNS Services, you must have at least one virtual server instance in a VPC in the IBM Cloud. If you do not have one, learn how to [get started with Virtual Private Cloud](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started&format=markdown).

While the private DNS resolvers are required to resolve private DNS names, they also resolve public DNS names if the request is for a name that is not defined to be in a private DNS zone.
{: note}

## Step 1: Create a DNS Services instance
{: #step-1-create-dns-services-instance}

1. Open the IBM Cloud catalog page and select **Networking**.
1. Click the **DNS Services** tile.
1. In the **Create** tab, select a pricing plan and optionally update the default the service name and resource group.
1. Click **Create**.

## Step 2: Add a DNS zone
{: #step-2-add-dns-zone}

1. From the resource page, select the DNS Services instance.
1. Click **Create zone** on the DNS Zones page.
1. Enter a fully qualified domain name for the zone and optionally add a label and description. The domain name can have a maximum of 5 levels. You can define subdomains within the zone later.
1. Click **Create zone**.
1. If the zone creation is successful, you are directed to the zone details page.


## Step 3: Add DNS resource records
{: #step-3-add-dns-resource-records}

1. Select the zone from the table on the DNS Zones page.
1. Select the **DNS records** tab.
1. Click **Add record**.
1. In the panel that appears, select the type of DNS record you are adding from the **Type** menu.
1. Input the required data for the type of DNS record selected.
1. Click **Add record**.

## Step 4: Add a VPC as a permitted network to the DNS zone
{: #step-4-add-vpc-as-permitted-network-to-dns-zone}

1. Select the zone from the table on the DNS Zones page.
1. Select the **Permitted networks** tab.
1. Click **Add network**.
1. Select the region from the **Region** menu to see the list of networks in that region.
1. Select the network from the list and click **Add network**.

Resources in the VPC can resolve records associated with the DNS zone (see [Step 3](#step-3-add-dns-resource-records) to add records to the DNS zone). The DHCP server returns the DNS servers (`161.26.0.7` and `161.26.0.8`) provided by DNS Services in its responses. If you have DHCP disabled on a server in the VPC, it is your responsibility to configure the DNS server IP addresses statically on that server, according to your operating system's documentation.

## Step 5: Verify that DNS name resolution works from the VPC
{: #step-5-test-if-the-dns-name-resolution-works}

Test whether the zone resolution works using a **`dig`** from the virtal server instance on your VPC. The following command should yield a resolution as the result.

```shell
dig www.example.com
```
{: pre}

## Next steps
{: #getting-started-api}

Follow the steps in these detailed guides to use the API for:
- [Creating a DNS zone](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-managing-dns-zones&format=markdown#create-dns-zone-api)
- [Managing permitted networks](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-managing-permitted-networks&interface=api&format=markdown)
- [Import a DNS zone file](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-managing-dns-records&interface=api&format=markdown#import-resource-records-api)
- [Managing DNS records](https://cloud.ibm.com/docs/dns-svcs?topic=dns-svcs-managing-dns-records&format=markdown#managing-dns-records-api)