This topic describes core tasks for managing domain names registered with Alibaba Cloud, including lifecycle management, information updates, DNS configuration, transfers, security, and access control.
Core scenarios
Scenario 1: Domain name lifecycle management
The lifecycle of a typical domain name includes several stages: active period, renewal grace period, redemption period, and pending deletion period.
Before expiration
Active period: Renew your active domain name before it expires. This is a safe and low-cost practice.
After expiration
Grace period: After expiration, the domain name enters a grace period. During this period, DNS resolution for the domain name may be suspended, but you can still renew it at the standard price. This is typically a 30-day period, beginning on the date of expiration. For .hk domain names, the grace period is 28 days, after which they are immediately deleted.
Redemption period: After the grace period, the domain name enters a redemption period. To restore the domain name, you must pay a redemption fee, which is much higher than the standard renewal price. The redemption window typically runs from day 31 to day 60 after expiration. For domain names managed by China Internet Network Information Center (CNNIC), such as .cn, this window is from day 31 to day 44 after expiration.
Pending deletion period: After the redemption period, the domain name enters a brief pending deletion period. Then, the registry deletes the domain name and releases it for public registration. During this period, you cannot renew the domain name.
How to renew:
Manual renewal: Go to the Alibaba Cloud Domain Names console, find the target domain name in the Domain Names page, and click Renew in the Actions column.
Batch renewal: On the Domain Names page, select multiple domain names and click Renew at the bottom.
Scenario 2: Registrant information and ownership changes
Keeping your domain name's registration information up to date is critical, especially when transferring ownership (due to a sale or business restructuring) or when contact details change.
Operation type | Description and use case |
| |
Change the contact information for the domain name's administrative, billing, or technical contacts. This operation does not change the legal ownership of the domain name. |
Scenario 3: DNS configuration
DNS resolution is the process of translating a domain name into an IP address. Changing your domain name's authoritative DNS servers is a high-risk operation that should be performed with caution.
Key concepts:
Modify DNS records: Modify individual DNS records (such as A, CNAME, or MX records) with your current DNS provider to change where your domain name points for specific services, like your website or email.
Change DNS servers: Change the authoritative name servers for your domain name to delegate all DNS resolution from one provider to another.
ImportantBefore changing your domain name's authoritative name servers, you must configure all necessary DNS records (such as A, CNAME, and MX records) with the new DNS provider. Failing to do so will cause a service interruption for your website and other services.
Scenario 4: Domain name transfers
You can transfer the management of a domain name between different registrars or between different Alibaba Cloud accounts.
Transfer type | Description |
Move a domain name's registration from another registrar to Alibaba Cloud. | |
Move a domain name's registration from Alibaba Cloud to another registrar. | |
Move a domain name from one Alibaba Cloud account to another, such as from a personal account to a company account. |
Advanced features
Access control (RAM)
For multi-user collaboration and enhanced security, you can use Resource Access Management (RAM) to configure fine-grained permissions for domain management. For example, you can grant a RAM user permission to manage one specific domain while denying access to all other domains. For more information, see Grant a RAM user permissions to manage domain names.
Domain name security
Domain name security locks: In the Domain Names console, you can enable an update lock and a transfer lock. These locks prevent unauthorized modifications or transfers that could result from a compromised account and are a critical security measure for high-value domain assets.
Domain Name System Security Extensions (DNSSEC): Enable DNSSEC to add a layer of cryptographic verification to your domain name. This helps prevent DNS spoofing and cache poisoning attacks by ensuring that DNS responses are authentic.