Sovereign DNS for Cambodia.

CNX operates authoritative and recursive DNS services for Cambodian institutions, and supports the national DNS ecosystem by hosting root server instances and PCH ccTLD and gTLD infrastructure at the exchange — supported by PCH, APNIC, and Netnod. Root queries from inside Cambodia resolve locally, on CNX infrastructure, without touching an international link.

Control over DNS is control over access to your services. Whoever determines where your domain resolves determines whether your applications are reachable, whether your users can authenticate, and under whose legal framework that access is governed. CNX keeps that control inside Cambodia — a national anycast infrastructure across multiple independent domestic nodes, with public-internet traffic handled by a separate bulkhead fleet on dedicated transit links.

DNSSEC is enabled on every zone by default. Zone-signing keys are held in Hardware Security Modules — generated in-country, non-exportable — with automated rollover and full audit logging.

CNX DNS Shield provides authoritative DNS with anycast resilience, DNSSEC, and HSM-backed key management — operated entirely inside Cambodia.