Custom domain at Yandex Cloud DNS

A guide for those whose domain records (DNS) are managed at Yandex Cloud DNS. The general order of connecting is in Custom domain; here is only what differs in the Yandex Cloud DNS panel. Always take the records and their values from the connection wizard: it shows exactly what your address needs, with copy buttons.

Where to edit records at Yandex Cloud DNS#

How to tell your domain’s DNS is at Yandex Cloud DNS: on the first step the wizard names the provider by the domain’s DNS servers (NS). At Yandex Cloud DNS they look like ns1.yandexcloud.net, ns2.yandexcloud.net. If the wizard named another provider, add the records there — even if you bought the domain at Yandex Cloud DNS.

Open the panel: https://console.yandex.cloud/
Go to: Console → folder → Cloud DNS → zone your domain → “Create record” (Создать запись).
A new record is created with the «Создать запись» (Create record) button.
Changes are saved with the «Создать» (Create) button.

What the wizard shows	Field in the panel
Record type	«Тип» (Type)
Record name	«Имя» (Name)
Time to live	“TTL”

In the «Имя» (Name) field you usually type only the left part (www). The panel’s documentation does not say for sure — so look at the record after saving: if it turned into www.example.com.example.com, delete it and enter the full name with a dot at the end (www.example.com.).

The root of the domain (example.com itself, without a subdomain) is written as @, an empty field or the full name depending on the panel — check the hint next to the field.

Copy the value with the button in the wizard, exactly as shown. If after saving the panel appended your domain to it (….example.com), add a dot at the end of the value.

Ownership record#

The ownership record proves that the address is being connected by its owner — without it the domain is not reserved for your account. Often there is no separate record: for a subdomain the CNAME record itself (its value starts with the request code) or the certificate record can be the proof — the wizard shows which way applies to you. When it shows a separate ownership record, it is a TXT:

_cenaly-verify.www   TXT   cenaly-verify=<code from the wizard>

Create a record of type TXT.
Name — as in the wizard (_cenaly-verify + your subdomain); the naming rule is above.
Paste the whole value, including cenaly-verify=, without quotes.

Once the domain works, the ownership TXT can be deleted: it is only checked before activation. More — Custom domain → ownership record.

Delete old A, AAAA records and forwarding (if any) on this same name — a CNAME cannot live with other records on the same name. Do not touch records of other names (root, mail, MX).
Create a record of type CNAME.
Name: the left part of the address, for example www (the rule is in the section above).
Value: the address from the wizard, via the “Copy” button.
TTL — the default or 300–3600 seconds.
Save («Создать» (Create)).

Right after saving go back to the wizard — it checks the record at the provider’s DNS servers itself and tells you if the name got an extra domain or the value points elsewhere.

Root domain without www#

The root of the domain (example.com without a subdomain) is connected at Yandex Cloud DNS with an ANAME record pointing to the address from the wizard. Whether it works for your particular address the wizard tells you on the first step: on some clouds the root is more reliable via www. For the root the wizard shows one or two more records (ownership and certificate) — add them too.

Certificate record#

The secure connection (HTTPS) turns on by itself: the certificate is issued and renewed for free. For this the wizard sometimes asks for one more record — the certificate authority needs it:

_acme-challenge.www of type CNAME — to an address like ….cm.yandexcloud.net (Russian side);
_cf-challenge of type TXT — for the root of the domain (international side).

They are created like the other records: name by the rule above, value via the button in the wizard. If the name _acme-challenge already has records of a previous service (another hosting with a Let’s Encrypt certificate), delete them — otherwise the certificate is not issued. Do not delete these records after connecting: the certificate is renewed through them.

How long to wait#

Yandex Cloud DNS’s documentation does not say how fast it publishes changes — usually minutes. The wizard checks the record right at the provider’s DNS servers, so it tells “the record is still spreading” from “the record is wrong” and in the first case shows an approximate waiting time. You can close the window — the connection continues on its own, and we will write when the site works.

If you changed an existing record, the old value may stay in caches for as long as its TTL was (often 1 hour, sometimes a day). This is not an error — the wizard shows “all correct, waiting”.

If a site already opens at the address#

If another site works at this address now, after changing the record visitors will start getting the new one. Before replacing the record at Yandex Cloud DNS, prepare the move: If the domain already has a site. Do not want to touch the old site — connect a separate subdomain, for example menu.example.com or shop.example.com.

Email on the domain#

The domain’s email lives in MX, TXT (SPF, DKIM, DMARC) records and sometimes in a separate mail subdomain. Connecting the site does not touch them — do not delete or change them at Yandex Cloud DNS. Only delete records on the name you are connecting, and only if the wizard pointed at them. More — Custom domain and email.

If the wizard shows an error#

Every wizard message leads to its own section of the errors page. The most common ones at Yandex Cloud DNS:

RECORD_NAME_DOUBLED — the name was saved with the domain twice
CNAME_CONFLICT_A — an old A record is left on the same name
TRAFFIC_TARGET_MISMATCH — the record points elsewhere
PROPAGATING — all correct, the record is still spreading

How to disconnect and what to delete#

Disconnect the domain in the wizard (“Disconnect domain”), then delete at Yandex Cloud DNS the records it lists: the site record (CNAME or ALIAS) and, if any, the ownership and certificate records. Leave email and other records alone. While the site record points to us, the address stays reserved for your account — this protects it from being taken over by another account. The wizard checks the removal with the “Check removal” button. More — Disconnecting a custom domain.

Yandex Cloud DNS specifics#

In the “Name” field you choose an option: “create a subdomain” (you type the name) or “same as the zone name” (the root).
ANAME works on the root next to MX/TXT, but the help forbids ANAME for delivery through Cloud CDN (the answer ignores geolocation) — for a location on the Yandex side the root is better via www.
The service does not verify domain ownership: create the public zone BEFORE changing NS, otherwise someone else may take the zone.
A TXT value is at most 1024 characters.

Sources#

This guide is based on Yandex Cloud DNS’s documentation, checked 2026-11-06. Panels change — if a button or field is labelled differently for you, follow the meaning of the step, and the wizard will tell you if the record came out wrong.