# DNS Limits

Adding a domain you own to your DigitalOcean account lets you manage the domain’s DNS records with the control panel and API. Domains you manage on DigitalOcean integrate with DigitalOcean Load Balancers and Spaces to streamline automatic SSL certificate management.

- DigitalOcean does not currently provide domain registration services. To use DigitalOcean DNS, you need to register a domain name with a registrar and [update your domain’s NS records to point to DigitalOcean’s name servers](https://www.digitalocean.com/community/tutorials/how-to-point-to-digitalocean-nameservers-from-common-domain-registrars).
- The number of domains you can add to your account depends on the limits set for your account. We use dynamic resource limits to protect our platform against bad actors. To request a limit increase, [contact support](https://cloudsupport.digitalocean.com). If you are a team owner or resource modifier, you can check your resource limits and request an increase on [the **Resource Limits** page in the DigitalOcean Control Panel](https://cloud.digitalocean.com/limits).
- All DNS records require a minimum TTL value of 30 seconds.
- DigitalOcean DNS does not support the following CAA standard features:
- Blocking anyone from issuing certificates by sending a semicolon (`;`) as the value
- Allowing name-value tags after the CA name, for example: `letsencrypt.org; abc=cde`
- Records created at a hostname covered by a wildcard record stop wildcard resolution for that hostname. For example, if you have an A wildcard record at `*.example.com`, and you add an MX record at the hostname `email.example.com`, the A wildcard record is no longer served at `email.example.com`. However, you can still add an explicit A record to the hostname `email.example.com` if your use case requires it.
- DigitalOcean DNS does not support [tags](https://docs.digitalocean.com/products/droplets/how-to/tag/index.html.md).
- When adding domains or DNS records containing non-ASCII characters (such as accents or other Unicode characters), you must first [convert them to Punycode](https://www.punycoder.com/).
- DigitalOcean's terms of service prohibit adding country code top-level domains (ccTLDs) from OFAC-sanctioned countries. For more information, including a list of countries, see section 5.7 of our **Rules of Conduct** in [our terms of service](https://www.digitalocean.com/legal/terms-of-service-agreement/).
- DigitalOcean DNS does not support the [creation of DNSSEC (DS) records](https://docs.digitalocean.com/support/does-digitalocean-support-dnssec/index.html.md).
- DigitalOcean’s name servers do not support domains with DNSSEC enabled.