Set up DynDNS

Reach your home network, NAS or camera under a fixed name, even when the IP address of your connection changes.

4 min readUpdated November 11, 2026

On this page

What DynDNS is for

Most home internet connections get a new IP address regularly. With DynDNS your router reports every new address to us automatically, and we set it for a host name of your domain, for example home.yourdomain.com. That way you always reach your home network under the same name.

DynDNS is included with every domain you have with us. Each domain can have up to 5 host names.

Add a host name

Open your domain under /dashboard/dienste and switch to the DynDNS tab.
Enter the name under Host name, for example home. If you leave the field empty, the domain itself is used.
Click Add host name.

You then see the credentials for this host name: the user name (the full host name) and a password.

The password is valid for this one host name only. It opens neither your account nor other DNS records.

Set up the router

Choose “Custom” or “DynDNS v2” as the provider in your router and enter these values:

Field	Value
Server / update URL	`https://api.citexnode.com/nic/update`
Host name / domain name	the full host name, e.g. `home.yourdomain.com`
User name	the same full host name
Password	the password from the DynDNS tab

FRITZ!Box

Under Internet → Permit Access → DynDNS choose the provider User-defined. Enter exactly this line as the Update URL, including the angle brackets:

text

https://api.citexnode.com/nic/update?hostname=<domain>&myip=<ipaddr>&myipv6=<ip6addr>

Domain name and User name are the full host name, Password is the password.

ddclient (Linux)

ini

protocol=dyndns2
use=web
server=api.citexnode.com
ssl=yes
login=home.yourdomain.com
password='YOUR_PASSWORD'
home.yourdomain.com

Test by hand

bash

curl -u 'home.yourdomain.com:YOUR_PASSWORD' 'https://api.citexnode.com/nic/update'

Without further parameters we use the address the call comes from. With ?myip=… you set it yourself, IPv4 and IPv6 together if you like, separated by a comma.

Answers of the server

Answer	Meaning
`good 203.0.114.7`	The address was set.
`nochg 203.0.114.7`	The address was already set, nothing changed.
`badauth`	Host name or password is wrong.
`notfqdn`	The host name is incomplete (the domain is missing).
`dnserr`	The address cannot be set, see below.

Check that it worked

In the DynDNS tab the address last reported and the time of the router's last call are shown next to the host name. The record also appears in the DNS tab. To check from outside:

bash

nslookup home.yourdomain.com

If the domain uses our nameservers (ns1.citexnode.de, ns2.citexnode.de), a new address is known everywhere after about 60 seconds. With other nameservers it takes up to 5 minutes. The Nameservers tab shows which nameservers your domain uses, see doc:domains/nameserver.

If it does not work

dnserr with a private address: Addresses such as 192.168.x.x or 10.x.x.x cannot be reached from outside and are refused. The same goes for connections without their own public IPv4 address (CGNAT, addresses starting with 100.64.), which is common with fibre and mobile connections. Use IPv6 in that case.
There is a CNAME at the name: A CNAME must not stand next to other records. Delete it in the DNS tab, then the host name can be added.
The name points to the right address, but nothing answers: DynDNS only sets the name. For a device in your home network to be reachable you also need a port forwarding rule in the router.

If you get stuck, open a ticket under /dashboard/tickets.