Disclosure: DNS Spy is a bunny.net affiliate. The bunny.net link below is a referral link. It costs you nothing, and we only point to tools we would run ourselves.
Yesterday, bunny.net made a big move. They removed all query fees from Bunny DNS. No per-request billing. No query limits. Free DNS hosting for up to 500 domains on a single account. You can read their full announcement here.
This is a real change, not a marketing tweak. DNS is the layer that sits between your users and your servers. Making it free pulls a cost out of every project you run.
We watch DNS for a living, so we wanted to give Bunny DNS a fair look. Here is what it does well, where it fits, and one thing free DNS will never do for you.
What bunny.net actually changed
Bunny DNS used to charge for queries. Now it does not. The new deal is simple:
No per-request billing
No query limits
Free DNS hosting for up to 500 domains per account
Smart records and health checks included, not locked behind a higher tier
One caveat. Bunny accounts still have a $1 per month minimum spend across the whole platform. DNS itself adds no usage charge on top.
This matters at scale. Bunny DNS already runs over 300,000 domains and handles close to 200 billion queries a month across 119 locations. A sudden spike of a million queries used to be a billing question. Now it is not.
What Bunny DNS is good at
Bunny DNS is not a plain record table. It started as the routing engine behind Bunny's CDN. That heritage shows.
You get smart routing. It can use latency data, health checks, and even JavaScript to decide where a request should go. So you can send users to the closest healthy server, not just a fixed IP.
The modern pieces are there too:
IPv6 works out of the box. Your nameservers resolve over IPv4 and IPv6 with nothing to set up.
DNSSEC uses NSEC Black Lies. You get tamper protection without letting people walk your whole zone.
Newer record types are supported. That includes HTTPS and SVCB, TLSA for DANE, and CDS and CDNSKEY for DNSSEC key automation.
Migration is easier than it used to be. Bunny can scan your domain and rebuild common records for you. You can also upload a BIND file if you prefer.
And it plugs into the rest of the stack. With 1-Click Acceleration you can turn on the CDN straight from a DNS record. With 1-Click Security you can switch on Bunny Shield to filter traffic and absorb DDoS at the edge.
The rest of the bunny.net stack
DNS is the front door. Behind it, bunny.net offers a CDN, Storage, Stream for video, an image Optimizer, Shield for security, Magic Containers, Edge Scripting, and a SQLite-style Database. If you already use one of these, free DNS in the same dashboard is an easy win. If you do not, DNS is a low-risk way to try the platform.
The one thing free DNS will not do
Here is the honest part. Free, fast, well-built DNS is great. But your DNS provider does not watch your DNS for you.
It will not tell you when a record changes that should not have. It will not warn you when a domain is about to expire. It will not flag a certificate that is about to lapse, or a CNAME that now points at nothing. Those are the failures that take sites down and open doors for attackers.
This is true of every provider, not just Bunny. The provider serves your records. Watching those records for an unexpected change is a separate job.
How DNS Spy monitors a Bunny deployment
This is what we build. DNS Spy watches your domains from the outside. You do not change your nameservers or move off Bunny. We query your public records and tell you the moment something moves.
On a Bunny setup, that means:
Record change alerts. The second an A, MX, NS, or TXT record changes, you know. Good for catching both mistakes and hijacks.
Nameserver sync checks. Useful right after you migrate to Bunny, to confirm every nameserver agrees.
DNSSEC validation. If you turn on Bunny's DNSSEC, we confirm it stays valid. (Enterprise)
Dangling CNAME detection. 1-Click Acceleration spins up Pull Zones. If one is removed later and a record still points to it, that is a takeover risk. We catch it. (Enterprise)
Domain and SSL expiration tracking. One dashboard for every renewal date, sorted by urgency.
Security Center. Automated checks across DNS, SSL, email, and resilience, with a letter grade you can hand to a client.
Look-alike domain monitoring. Phishing Sentinel watches for typosquatted and look-alike domains registered to impersonate yours, and flags the ones that go live with real DNS and hosting. Your provider can't see these — they live outside your zone, on someone else's account. (Enterprise)
Setup takes a few minutes. Add the domain. Pick how you want alerts. Email is on every plan. Slack, Discord, and PagerDuty come with Enterprise.
The short version
Move your DNS to Bunny if the price and the routing fit. It is a strong product, and now it is free. Then put a monitor in front of it, so a quiet change does not become a loud outage.
Try Bunny DNS free: Get started with Bunny DNS
Then monitor it: Start a free 7-day DNS Spy trial. No card required.
