RHost Documentation

Introduction#

What is RHost?#

RHost is a business platform built and operated by RHost that brings your domain, email, DNS, and productivity apps together under one account. Register a domain, then switch on professional email, storage (Drive), Forms, and video meetings (Meet) as you need them — paying only for the services you use.

Think of it as two things working together. First, a domain & DNS platform: buy a new domain through RHost, or bring one you already own, and manage all its DNS from one dashboard. Second, a productivity suite: turn on a Workspace (professional email + Drive storage) for that domain, then add Meet and Forms as you need them — paying only for what you switch on.

RHost is also your single sign-on hub. You and the people you add sign in once with an RHost account and launch Mail, Drive, Meet, and Forms without separate passwords for each.

RHost's DNS is powered by PowerDNS — a proven, high-performance open-source nameserver used by some of the world's largest DNS operators. Changes you make in the dashboard are reflected in the DNS within seconds.

How it works#

The flow to get your domain live on RHost is straightforward:

1. 1

   Add your domain

   Enter your domain name in the Domains dashboard. RHost immediately creates a DNS zone and seeds it with default SOA and NS records.

2. 2

   Set up your DNS records

   Add all the records your domain needs — A, AAAA, MX, CNAME, TXT, and so on. If RHost can auto-import your existing records from your current provider, it will do so automatically.

3. 3

   Point your nameservers

   Log in to your domain registrar and update the nameservers to RHost's nameservers. Once propagated, all DNS queries for your domain will be answered by RHost.

Platform nameservers#

When adding a domain to RHost, you will need to update your nameservers at your registrar to point to the following:

Getting Started#

Create an account#

Navigate to rhost.rw/auth/signup and complete the three-step registration form:

• Step 1 — Personal information: first name, last name, email address, and optional phone number.
• Step 2 — Organisation details: company name, address, city, and country (all optional).
• Step 3 — Password: choose a strong password, confirm it, and accept the terms of service.

You can also sign up using your Google or GitHub account via the OAuth buttons on the signup page. After registration, a verification email will be sent to your address.

Your account#

Your account groups your domains, DNS zones, and team members together — every domain belongs to your account. It's created automatically when you sign up; there's nothing to set up.

Team members can be invited to your account with their own roles and permissions.

Add your first domain#

Once you have a workspace selected, navigate to Domains in the sidebar. In the Add a domain you already own panel, type your domain name and click Add domain.

RHost will immediately:

• Create a DNS zone for your domain.
• Seed the zone with default SOA and NS records.
• Attempt to auto-import your existing DNS records from your current provider.

You will be redirected to the domain detail page where you can review imported records, add new ones, and eventually point your nameservers to go live.

Buying a Domain#

Search & availability#

To register a brand-new domain, go to Domains → Register and type the name you want. RHost checks availability live against the global registry (via RDAP) and shows you which extensions are free, which are taken, and the yearly price of each.

• Available — free to register right now, with its price shown per year.
• Registered — already owned by someone else. If you own it elsewhere, you can add it as an external domain or transfer it in instead.
• Unsupported — the extension (TLD) is not one RHost sells yet.

Registering a domain#

Pick one or more available domains and continue to checkout. You'll choose a registrant contact (the legal owner of the domain — see below), then pay securely by card. As soon as payment succeeds, RHost:

• Registers the domain in your name.
• Creates its DNS zone and points it at RHost's nameservers automatically — no manual nameserver step needed for domains bought here.
• Adds it to your Domains dashboard, ready for records and apps.

Registered vs external domains#

RHost handles two kinds of domain. The difference is only about where the registration lives — both get the full DNS dashboard and can run Mail, Drive, and the other apps.

Domain contacts#

Every registered domain needs a registrant contact — the person or organisation that legally owns it. Manage these under Contacts. You can reuse one contact across many domains, and update details (address, phone, email) in one place.

Transferring a domain in#

To move a domain's registration to RHost, open Domains → Transfer in, enter the domain and the authorization (EPP) code from your current registrar, and submit. You can track the request's status and cancel it while it is still pending. Transfers follow the standard registry process, so they can take a few days to complete.

Domain Management#

Adding an external domain#

An external domain is a domain you registered at a third-party registrar (Namecheap, GoDaddy, Cloudflare Registrar, etc.) that you want RHost to manage DNS for. You do not need to transfer your domain registration — only the nameservers need to change.

Enter just the root domain (e.g. example.rw) without a trailing dot or any subdomain prefix. RHost normalises the input automatically.

Domain lifecycle#

Every domain in your inventory has two status indicators:

Pointing nameservers#

Once your DNS records are fully configured, the final step is to update your nameservers at your registrar. The exact steps depend on your registrar but generally follow this pattern:

1. 1Log in to your domain registrar's control panel.
2. 2Navigate to your domain's management page.
3. 3Find the Nameservers or DNS section.
4. 4Switch from the default nameservers to custom nameservers.
5. 5Enter ns1.rwa-host.rw and ns2.rwa-host.rw.
6. 6Save the changes.

After saving, use the Check nameservers button on the domain detail page to confirm that RHost can see the NS change. Propagation typically takes between 30 seconds and 48 hours depending on your registrar and the TTL of your previous NS records.

Expiry alerts#

RHost can notify you before a domain expires so you can take action in time. To configure alerts:

1. Open a domain's detail page.
2. Click Expiry alerts in the header.
3. Choose which days before expiry you want to be alerted (e.g. 90, 30, 7, 1 days).
4. Toggle email and in-app notifications on or off independently.
5. Use the Send test email button to verify delivery.

DNS Records#

Record types reference#

RHost supports all standard DNS record types. Below is a reference of the most commonly used ones:

Creating records#

Navigate to a domain's DNS Records tab and click Add record. Fill in the record modal:

• TypeSelect the DNS record type from the dropdown.
• NameThe hostname. Use @ for the zone apex (root domain), or enter a relative label like www, mail, _dmarc. RHost will automatically append the domain name.
• ValueThe record's content. For A records this is an IPv4 address; for CNAME it is the target hostname ending with a dot; for MX it is the mail server hostname.
• TTLTime To Live in seconds. Controls how long resolvers cache this record. Default is 300 seconds. Lower values allow faster changes but increase DNS query load.
• PriorityOnly visible for MX and SRV records. Lower numbers have higher priority.

Editing and deleting records#

Hover over any record row in the DNS tab and click the edit (pencil) icon to modify it, or the delete (trash) icon to remove it.

SOA and NS records are locked and cannot be edited or deleted. These records are managed by RHost to ensure zone integrity.

Pending vs active records#

When RHost auto-imports records from your existing DNS provider, they are created as pending. Pending records are stored in the database but are disabled in PowerDNS — resolvers will not serve them until you confirm.

This gives you the opportunity to review the imported records before they go live. In the DNS Records tab:

• Pending records are shown with an amber Pending badge.
• Click Confirm All to activate all pending records at once.
• Or select individual records and confirm them one at a time.
• Once confirmed, records are immediately served by PowerDNS.

History and rollback#

Every create, update, and delete action on DNS records is logged in the domain's History tab. Each entry shows:

• The action type (created, updated, deleted).
• The record type and name.
• The old and new values (for updates).
• The email address of the user who made the change.
• A timestamp.

Click Rollback on any history entry to instantly revert that record to its previous state. Rollbacks are themselves logged in the history.

Zone Management#

Importing a zone file#

RHost supports importing BIND-format zone files (.zone files). This is useful when migrating from another DNS provider that can export zone files.

Navigate to the Import / Export tab and paste or upload your zone file. RHost will:

• Validate the zone file format (must include SOA and at least two NS records).
• Delete existing non-locked records of the same types found in the import.
• Stage all parsed records as pending (disabled) for your review.
• Leave SOA and NS records untouched (they are locked).

After the import, go to the DNS Records tab and click Confirm All to activate the imported records.

A valid BIND zone file looks like this:

$ORIGIN example.rw.
$TTL 300

; SOA
@  IN  SOA  ns1.rwa-host.rw. hostmaster.example.rw. (
            2024010101 ; serial
            10800      ; refresh
            3600       ; retry
            604800     ; expire
            300 )      ; minimum TTL

; Nameservers
@  IN  NS   ns1.rwa-host.rw.
@  IN  NS   ns2.rwa-host.rw.

; A records
@     IN  A    192.168.1.1
www   IN  A    192.168.1.1
mail  IN  A    192.168.1.2

; MX record
@  IN  MX  10  mail.example.rw.

; TXT record (SPF)
@  IN  TXT  "v=spf1 ip4:192.168.1.0/24 ~all"

Exporting a zone file#

To export your zone as a BIND-format file, navigate to Import / Export and click Export zone file. The exported file contains all active records for the zone and can be imported into any BIND-compatible DNS server.

Zone file editor#

For advanced users, RHost provides a full zone file text editor. Navigate to Import / Export → Open zone editor. You can edit the raw zone file directly and save — changes are parsed and staged as pending records, following the same import flow.

DNSSEC#

What is DNSSEC?#

DNSSEC (DNS Security Extensions) is a suite of specifications that adds cryptographic authentication to DNS responses. Without DNSSEC, an attacker who can intercept DNS traffic could forge responses and redirect your visitors to malicious servers — a technique called DNS cache poisoning.

When DNSSEC is enabled, each DNS response includes a digital signature. Validating resolvers check this signature against a chain of trust anchored at the root DNS zone. If the signature does not match, the resolver discards the response and the domain is unreachable from that resolver.

Enabling DNSSEC#

Navigate to the DNSSEC tab on your domain's detail page and click Enable DNSSEC. RHost will:

• Generate a KSK (Key Signing Key) using ECDSA P-256 SHA-256 (algorithm 13) — the recommended modern algorithm.
• Sign all records in the zone.
• Provide you with DS (Delegation Signer) records to add at your registrar.

DS records#

After enabling DNSSEC, the DS records panel will display the DS record(s) you need to add at your registrar. They look like this:

12345 13 2 ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF1234567890

The fields are: Key Tag, Algorithm (13 = ECDSA P-256), Digest Type (2 = SHA-256), and the Digest itself.

Copy these values into your registrar's DNSSEC DS record configuration. Once the parent zone (e.g. the .com registry) publishes the DS record, the chain of trust is complete.

Workspace (Mail + Drive)#

What the Workspace is#

A Workspace turns a domain into a productivity suite for your team. It bundles the two apps that work best together — Mail (professional email at your own domain) and Drive (cloud storage) — into a single plan. Enabling the Workspace switches on both at once. Open any domain and go to the Apps tab to set it up.

Choosing your quota#

You size the Workspace to your team with two dials:

• Mailboxes (users) — how many people get an email address and Drive space on this domain. Use the − / + stepper, or type a number.
• Storage per user — how much Drive storage each mailbox gets. Pick a preset (30 GB, 100 GB, 1 TB, 5 TB) or enter a custom size.

The price updates live as you adjust the dials. It is billed per mailbox, per month, and the storage you choose is what each user gets in Drive.

Custom storage#

If none of the presets fit, click Custom and type the exact amount of storage each user should get, from 1 GB up to 10 TB. The per-mailbox price recalculates instantly for the size you enter.

Buying the Workspace#

When the quota looks right, click Continue to payment. After checkout, RHost provisions everything automatically: it enables Mail and Drive, creates the mailboxes, and publishes the email DNS records for the domain. The Apps tab then shows your active Workspace with its mailbox count, storage, and monthly price.

Upgrading & downgrading#

Your team can grow or shrink at any time. On an active Workspace, click Change plan, adjust the number of mailboxes or the storage per user, and confirm. Billing is prorated automatically — you only pay the difference for the rest of the cycle. Click Cancel to turn the Workspace off; Mail and Drive are disabled and users lose access.

Mail#

Professional email#

Mail gives everyone on your domain a real mailbox at name@yourdomain. It is included in the Workspace, so once the Workspace is active, mailboxes exist for each user you create. Mail supports the standard protocols (IMAP/SMTP) as well as RHost webmail.

Email DNS (MX, SPF, DKIM, DMARC)#

For email to send and receive reliably — and land in inboxes rather than spam — a domain needs the right DNS records. RHost creates and manages these for you automatically when Mail is enabled:

Using webmail#

Users open Mail from the RHost app launcher and are signed in automatically (see Sign in with RHost). There is no separate email password to remember — the RHost account is the login.

Drive#

Cloud storage#

Drive is cloud file storage for your team, included in the Workspace alongside Mail. Every mailbox user gets their own Drive space to upload, organise, and share files, reachable from the RHost app launcher.

Per-user storage#

Each user's Drive quota is exactly the storage per user you chose when setting up the Workspace. If you picked 100 GB, every user gets a 100 GB Drive. When you change the storage on the Workspace plan, each user's Drive limit updates to match.

Add-ons: Meet & Forms#

Meet and Forms are optional apps you can buy on their own, separately from the Mail + Drive Workspace. They appear as cards in the Add-ons section of a domain's Apps tab.

Meet — video meetings#

Meet is HD video meetings that run right in the browser — no download required. It is billed as a monthly add-on.

Forms — surveys & responses#

Forms lets your team build forms and surveys and collect responses. Like Meet, it is a monthly add-on billed separately from the Workspace.

Adding & removing add-ons#

On the Apps tab, click Add on the Meet or Forms card to go to checkout; once paid, the app switches on for the domain and its users. To stop it, click Remove — billing stops and users lose access to that app. Your Mail and Drive Workspace is unaffected.

Mailbox Users#

Creating users#

Mailbox users are the people on your domain — each one gets an email address, Drive space, and access to whatever apps you've enabled. As the domain owner, open the domain's Users area and click Create user. You provide the mailbox name (the part before the @) and set an initial password in the same step.

How users sign in#

Share the app link with your user. They click Sign in with RHost and enter their full address — name@yourdomain — and the password you set. Because the address includes your domain, the same mailbox name can exist on different domains without clashing; sam@acme.com and sam@other.com are two different people.

What users can access#

A mailbox user is scoped to their domain and the apps enabled on it. If a domain has Mail and Drive but not Meet, its users can open Mail and Drive but not Meet. Users do not see billing, DNS, or other domains — that management stays with you, the owner, in the console.

Sign in with RHost#

Single sign-on#

RHost is the identity hub for all its apps. You sign in once to RHost, and Mail, Drive, Meet, and Forms all trust that session — there are no separate passwords per app. When an app needs you to sign in, you'll see a Sign in with RHost button; clicking it authenticates you and drops you straight into the app.

The app launcher#

After signing in, the app launcher shows the apps you have access to. Click any one to open it, already signed in. Which apps appear depends on what's enabled for your domain — owners manage that from each domain's Apps tab.

Billing & Payments#

How pricing works#

RHost only charges for what you switch on. There are a few kinds of charge:

• Domains — a yearly fee to register (or a small yearly managed-DNS fee for external domains).
• Workspace — a monthly charge per mailbox, based on the storage per user you chose.
• Add-ons — Meet and Forms, each a separate monthly charge.

If a promotion is running, the discount is shown right on the price (with the original struck through) and applied automatically at checkout.

Paying (checkout)#

All payments go through a secure checkout. You're redirected to enter your card details, and as soon as the payment succeeds RHost activates the service and brings you back to the dashboard. You never enter card numbers directly into RHost.

Invoices & payment method#

The Billing page in the console lists your active services as a single tidy summary — the Workspace on one line, each add-on on its own — plus your total monthly cost. Your invoices appear there too, each with a downloadable PDF. Click Manage payment method to update your card or review past payments in the secure billing portal.

Cancelling a service#

You can cancel any service from where you turned it on: the Workspace from the domain's Apps tab (Cancel), an add-on from its card (Remove), or any line from the Billing page. Cancelling stops future charges and disables that service for the domain's users.

Team & Members#

Your account & team#

Your account is the home for everything you own — your domains, DNS zones, apps, billing, and the teammates who help you manage them. It's created automatically when you sign up; there's nothing to configure.

Inviting members#

To invite a team member to a workspace:

1. 1Navigate to Settings → Workspace in the console.
2. 2Click Invite member and enter their email address.
3. 3Select their role (Owner, Admin, or Member).
4. 4Click Send invitation.

The invitee will receive an email with a link to accept the invitation. They must have an RHost account (or create one) before the invitation can be accepted.

DNS Tools#

RHost provides a suite of free, public DNS diagnostic tools at /tools. No account is required.

DNS Lookup#

Query any DNS record type for any domain in real time. Enter a hostname, select a record type (A, MX, TXT, etc.), and get the current live response from a public resolver.

Useful for: verifying that a new record has propagated, checking MX configuration, confirming TXT records like SPF and DMARC are published correctly.

WHOIS Lookup#

Retrieve WHOIS registration data for any domain — registrar, registration date, expiry date, nameservers, and registrant contact information where publicly available.

Note that WHOIS privacy protection (offered by most registrars) will mask the registrant's personal contact details.

DNS Propagation Checker#

Check whether a DNS change has propagated to multiple public resolvers around the world simultaneously. Enter a hostname, select a record type, and see the response from Google (8.8.8.8), Cloudflare (1.1.1.1), Quad9 (9.9.9.9), and others.

Useful for: confirming that a nameserver change or record update has propagated globally, or diagnosing inconsistent resolution in different geographic regions.

DNS Health Checker#

Run a comprehensive health check on a domain's DNS configuration. The tool checks for common misconfigurations including:

• Missing or misconfigured MX records.
• Missing SPF, DKIM, and DMARC TXT records.
• SOA serial and refresh interval validity.
• Nameserver consistency across multiple resolvers.
• DNSSEC chain-of-trust validation.

TTL Calculator#

Convert TTL values between seconds and human-readable formats (minutes, hours, days). Useful for planning TTL changes before a migration — enter a TTL in seconds and see exactly how long resolvers will cache that record.

Frequently Asked Questions#

How long does DNS propagation take?#

Propagation time depends on two things: the TTL of the record being changed, and how aggressively resolvers respect TTLs. In practice:

• Records with a TTL of 300 seconds (5 min) typically propagate globally within 5–15 minutes.
• Records with a TTL of 86400 seconds (24 hours) can take up to 48 hours to propagate fully.
• Nameserver changes (NS records) are typically slower — allow up to 48 hours even with a low TTL.

The nameservers are not pointing — what should I do?#

If the Check nameservers button still shows "Nameservers not pointed" after waiting for propagation:

• Double-check that you saved the nameserver change at your registrar. Log back in and confirm ns1.rwa-host.rw and ns2.rwa-host.co are listed.
• Some registrars require nameservers to be registered (glue records) before they can be used. RHost nameservers are already registered — no glue records needed.
• Wait the full 48 hours. Propagation for NS changes is legitimately slow with some registrars.
• Use the DNS Propagation Checker tool to query your domain's NS record type from multiple resolvers and confirm what they are returning.

I confirmed my records but they are not resolving#

If your records are confirmed (active, not pending) but queries are still not resolving as expected:

• Verify that your domain's nameservers are pointing to RHost (check the Live badge on the domain overview).
• Ensure the record type and name are correct. Use the DNS Lookup tool to query your domain directly.
• Check that you do not have a conflicting CNAME at the zone apex — CNAME records cannot coexist with other record types at the same name.
• If you recently added the record, allow a few seconds for it to propagate through the packet cache.

Should I enable DNSSEC?#

Yes, if your registrar supports DS record management (most modern registrars do). DNSSEC adds a meaningful layer of security against DNS spoofing and cache poisoning attacks with minimal performance overhead.

The main caveat is that once you enable DNSSEC and add DS records at your registrar, you must not disable DNSSEC or delete the zone in RHost without first removing the DS records from your registrar. Leaving orphaned DS records at the registrar will cause DNSSEC validation to fail and make your domain unreachable from validating resolvers.