A specialized skill for configuring high-performance, secure, and reliable DNS records with expert-level migration and authentication strategies.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install dns
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install dns using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is DNS Configuration Skill?
The DNS Configuration skill provides a comprehensive framework for managing domain records effectively, ensuring minimal downtime during migrations and maximum email deliverability. It covers critical technical aspects including TTL management, multi-provider resolution testing, and the essential trifecta of email authentication: SPF, DKIM, and DMARC.
By leveraging these Openclaw Skills, developers can prevent common infrastructure pitfalls such as unauthorized certificate issuance via CAA records and broken web traffic caused by improper apex or www handling. The skill focuses on professional-grade standards used by DevOps engineers to maintain domain health and security across various providers like Cloudflare and traditional registrars.
DNS Configuration Skill Use Cases
- Planning zero-downtime domain migrations by optimizing TTL refresh cycles.
- Resolving email delivery issues by implementing mandatory SPF, DKIM, and DMARC standards.
- Hardening domain security against unauthorized SSL/TLS certificate issuance using CAA records.
- Troubleshooting complex propagation delays across global resolvers like Google and Cloudflare.
- Configuring canonical redirects to ensure consistent web traffic between apex and www subdomains.
How DNS Configuration Skill Works
- Pre-Migration Preparation: Lower TTL values to 300s at least 48 hours before changes to ensure rapid propagation of new records.
- Authentication Layering: Deploy a single SPF TXT record alongside DKIM and DMARC to secure the mail stream.
- Security Constraints: Set CAA records to explicitly define which Certificate Authorities are authorized to issue certificates for the domain.
- Canonical Configuration: Define the relationship between the apex domain and the www subdomain, ensuring HTTPS certificates cover both.
- Validation & Debugging: Utilize CLI tools to trace the full resolution chain and compare authoritative responses against cached data.
DNS Configuration Skill Setup
To implement these DNS best practices within your workflow, ensure your environment has the necessary network tools installed. Use the following commands to begin auditing your current configuration:
# Check current cached TTL and records
dig +nocmd +noall +answer yourdomain.com
# Trace the full resolution chain from root nameservers
dig +trace yourdomain.com
Integrate these Openclaw Skills into your deployment pipeline to automate DNS verification during site launches.
DNS Configuration Skill Data Schema & Taxonomy
The skill organizes DNS configuration data into functional modules to ensure every record type is accounted for:
| Module | Record Types | Key Objective |
|---|---|---|
| Migration | A, CNAME, ALIAS | Manage TTL transitions and propagation monitoring. |
| Email Security | TXT (SPF, DKIM, DMARC) | Ensure 10/10 mail-tester scores and prevent spoofing. |
| Certificate Safety | CAA | Restrict CA issuance to specific providers like Let's Encrypt. |
| Routing | A, AAAA, CNAME | Handle apex vs. www and wildcard subdomain logic. |
| Cloudflare | Proxied Records | Manage Orange/Grey cloud behavior and CNAME flattening. |
DNS Configuration Skill Advanced Features
- Propagation Strategy: Logic for lowering TTL to 300s pre-migration and raising to 86400s post-stability.
- DMARC Enforcement: Guidance on moving from 'p=none' to 'p=quarantine' for active threat mitigation.
- Authoritative Auditing: Techniques to query nameservers directly (
dig @ns1.provider.com) to bypass local ISP caching. - Cloudflare Specifics: Management of SSH and non-HTTP traffic through grey-clouding to prevent broken services.
- Wildcard Logic: Explicit handling of apex vs. wildcard record precedence for complex sub-domain architectures.
SKILL.md
Loading
Related Openclaw Skills
Diverge
A cognitive workflow skill that enables AI agents to evaluate complex problems through multiple distinct personas before synthesizing a final solution.
Digital Marketing
A comprehensive growth marketing system for planning, launching, and optimizing revenue-focused digital campaigns and funnel operations.
Dietitian
A technical AI skill for structured meal planning, precise calorie targeting, and macro-nutrient optimization based on physiological data.
Diagram
An AI-powered visualization tool for generating technical diagrams, system architectures, and workflows using Mermaid, PlantUML, and ASCII.
Docker Compose
Define and manage multi-container applications with precise dependency handling, networking, and volume management.
Documentation Master
A comprehensive framework for creating, maintaining, and scaling high-quality technical documentation that developers actually want to read.
Featured*
