Skip to content
Cloud DNS (add-on)

Release Notes

What has changed in Cloud DNS, newest first.

Bug fixes and routine maintenance are not listed here. The platform release notes cover every service in one feed.

  1. 2026

    New

    Look up a domain against every Cloud DNS policy #

    The Policies page in the Cloud DNS section can check one domain against every policy in the context at once. Each policy answers whether the name is blocked, whether the name itself or a parent domain is listed, and which category or list of your own carries the entry. It also says when an allowlist entry does not cover the name because the block comes from a parent domain, and what to do about it. The lookup replaces the download of a policy’s effective list, which could not say which list caused a block.

    Sign In

    New

    Cloud DNS usage statistics #

    A Statistics page opens the Cloud DNS section. It shows how many DNS queries the network answered and how many a policy blocked, as three figures and a trend for today, the last 7 or 30 days, or the last 6 or 12 months. Usage is sampled every few minutes and counted per network. The page follows the roles that read the context’s other statistics, so it can be followed without the right to change the filtering.

    Sign In

    Changed

    Cloud DNS list entries and the category catalogue #

    An entry in a blocklist of your own covers the domain and everything under it, so no wildcard is needed; a typed wildcard prefix or trailing dot is accepted and dropped, and an entry that cannot be a domain name is refused. An allowlist entry removes exactly the name it holds from what a policy blocks. The category catalogue lists the active categories only; a category the platform has switched off stays, marked inactive, in the policies that already selected it. Two categories are recommended, Malware, Phishing & C2 and Scam & Fake Shops. A policy holds at most 50 categories, 50 lists of each kind, and five million domains in total.

    Sign In

  2. 2026

    New

    Curated categories in Cloud DNS #

    Cloud DNS now ships a catalogue of blocklists that Netgraph curates and keeps current, in three groups: Security, Content, and Ads and tracking. A category states what it covers and what it does not, its domain count and when it was last updated. Three categories are marked as recommended, and a context with no policy yet can start from them in one step. The catalogue is included in the add-on.

    Sign In

    Changed

    Cloud DNS section in the Administration Portal #

    A context in Cloud DNS mode gets its own section in the menu, with three pages: Policies, Lists (Categories, Blocklists and Allowlists) and DNS settings (forwarding and internal DNS records). The DNS tab under Service Gateway now holds only the DNS mode switch. Rulesets are now called policies, and the editor is its own page: name, where it applies, when it applies on a week calendar with presets and a time zone, what it blocks, and what it always allows. Each policy card shows its status, what it blocks and allows, and how many domains that is, and can be duplicated.

    Sign In

  3. 2026

    New

    Cloud DNS #

    A Sign In Enterprise network can be turned from plain DNS forwarding into a managed filtering resolver that Netgraph runs for it. Every lookup is checked against the policy you set before it is answered: blocked domains do not resolve, allowlisted domains always do.

    You subscribe to blocklists by URL, which are fetched and kept refreshed for you, or build your own. Allowlists always override blocklists, and custom records map internal names to addresses.

    A ruleset combines the lists, an audience of either the whole network or selected sites, and an optional weekly schedule with its own time zone, so a policy can apply only at certain hours.

    Lists and records can be imported and exported in bulk, and the fetch status of a subscribed list shows when it was last refreshed.

    Sign In

Next