01 / Platform and software / C.01How it works
C.01

DNS zone editor for servers and Cloudflare

Edit A, MX, TXT, CAA and other DNS records for cPanel, Plesk and DirectAdmin servers from one form. ctapanel validates each record type before saving, so invalid values are never written. Every change bumps the SOA serial, and a zone reset reverts all edits at once.

Screen sheetC.01
Topic
C · Platform and software
Order
01 / 06
Points
06
Panel support
4 / 4 panels
02 / FigurePanel screen
Hover the numbers
app.ctapanel.com/dnsDNS zone11 records · cluster fra-01Add recordDOMAINatolyeyedi.comAAAAACNAMEMXTXTCAATypeNameValueTTLA​@185.42.17.9014400Awww185.42.17.9014400MX​@10 mail.atolyeyedi.com14400TXT​@v=spf1 +a +mx -all3600CNAMEcpanelweb01.ams.ctahost.com14400systemSOA serial2026092204Reset zoneSystem records cannot be deleted, and the SOA serial is bumped on every change — the way panels do it.01020304
  1. 01Validation per typeEach of the eight record types has its own rule: priority on MX, weight and port on SRV, tag on CAA.
  2. 02System records lockedThey cannot be deleted; the panel services’ CNAME records are added according to the panel type.
  3. 03SOA serial bumpsEvery change bumps the serial and stamps the update time, the way panels do it.
  4. 04Zone resetThe zone goes back to its original state, undoing all your changes in one go.
Fig. 02 — DNS zone editor for servers and Cloudflare
03 / What it does6 points

What it does.

ctapanel lists a zone’s records in one editor, so the record behind a mail outage or a server move is changed in seconds. Validation runs before anything is saved: an MX record without a priority is flagged instead of written. If an edit goes wrong, a zone reset restores the original records. Missing SPF and DMARC records come from the same data as the email screen, so gaps are visible from inside the zone.

  1. Eight record types with type-specific validation: priority on MX, weight and port on SRV, a tag on CAA.

  2. SOA serial increment and update timestamp on every change, the same way the panels themselves do it.

  3. Protected system records that cannot be deleted, plus the panel services’ CNAME records added to match the panel type.

  4. Zone reset to the original state, undoing all changes in a single step.

  5. Separate lists for DNS clusters and zone problems, with missing SPF and DMARC records drawn from the same data as the email screen.

  6. Cloudflare tab next to the server zone for domains whose DNS runs at Cloudflare: the live public records, edited with the same form.

04 / CloudflareOAuth · live records

Server and Cloudflare zones, one editor.

The DNS screen shows the server zone and the live Cloudflare records side by side, edited with the same form and the same permissions. Once a domain’s name servers point to Cloudflare, visitors and mail servers read the Cloudflare records, not the server zone. Connecting the Cloudflare account is a one-time step.

How it works

  1. 01Connect over OAuth

    Sign in with Cloudflare via OAuth. There is no API token to copy, and the Cloudflare password never reaches ctapanel. Access is stored encrypted, renewed automatically and revoked the moment the account is disconnected.

  2. 02Edit live records

    Pick a domain and open the Cloudflare tab. Edit A, AAAA, CNAME, MX, TXT, NS, SRV and CAA records, set TTL or Auto, and toggle the orange-cloud proxy per record.

  3. 03Move a domain to Cloudflare

    “Move to Cloudflare” adds the zone on the Free plan to the chosen account and copies the server’s records. The proxy stays off, so mail, cPanel and webmail keep working. Turn it on per record when ready.

  4. 04Update name servers

    Cloudflare assigns two name servers, and ctapanel displays them. Set them at the registrar, then use “Check now” to have Cloudflare verify immediately instead of waiting.

Details

  1. Scope limited to the selected domain and the names under it. Other names in the same Cloudflare zone are neither listed nor editable.

  2. Record types the screen does not edit (HTTPS, SVCB, PTR and others) are never dropped silently: their count is shown, so nothing appears missing.

  3. Repeat moves that only fill gaps: identical records are skipped, and records Cloudflare rejects are listed with the reason while the rest continue.

  4. Bulk DNS changes targeting the server, Cloudflare or both, with a dry run before anything is written.

  5. Cloudflare-aware SSL status: SSL mode, main-record proxy state and the edge certificate are checked hourly, so proxied sites are not flagged for the origin certificate.

  6. Audit trail for every Cloudflare change (user, record, proxy state). Viewing and editing use the server tab’s DNS permissions; connecting the account is a separate permission.

05 / Panel-by-panel support4 / 4 panels

Which panels support it?

Capability DNS zone editor

  • yesManaged from the panel
  • yesManaged from the panel
  • yesManaged from the panel
  • yesManaged from the panel

Servers without a control panel have no account, reseller or mailbox management, because those come from the panel itself. Firewall, DNS, services and the terminal work over SSH. See the full table

06 / Platform and software6 screens

Platform and software

Every layer a site runs on top of.

07 / Get started14 days free · No card needed

Connect your first server today.

Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.

No setup fee · Cancel anytime · EU-hosted