diff --git a/dnsapi/dns_aruba.sh b/dnsapi/dns_aruba.sh
new file mode 100644
index 00000000..7e743f28
--- /dev/null
+++ b/dnsapi/dns_aruba.sh
@@ -0,0 +1,292 @@
+#!/usr/bin/env sh
+
+#Original Author: Gerardo Trotta <gerardo.trotta@euronet.aero>
+
+#Application username
+#ARUBA_AK="xxxxx"
+#
+#Application password
+#ARUBA_AS="xxxxxx"
+#
+#API key
+#ARUBA_TK="xxxxxxxxxxxxxxxx"
+#
+#Consumer Key
+#ARUBA_CK="sdfsdfsdfsdfsdfdsf"
+
+#ARUBA_END_POINT=aruba-b-it
+
+#'aruba-business-it'
+ARUBA_BUSINESS_IT='https://api.arubabusiness.it'
+
+_aruba_get_api() {
+  _ogaep="$1"
+
+  case "${_ogaep}" in
+
+    aruba-b-it | arubabit)
+      printf "%s" $ARUBA_BUSINESS_IT
+      return
+      ;;
+    *)
+      _err "Unknown parameter : $1"
+      return 1
+      ;;
+  esac
+}
+
+_initAuth() {
+  ARUBA_AK="${ARUBA_AK:-$(_readaccountconf_mutable ARUBA_AK)}"
+  ARUBA_AS="${ARUBA_AS:-$(_readaccountconf_mutable ARUBA_AS)}"
+  ARUBA_TK="${ARUBA_TK:-$(_readaccountconf_mutable ARUBA_TK)}"
+
+  if [ -z "$ARUBA_AK" ] || [ -z "$ARUBA_AS" ] || [ -z "$ARUBA_TK" ]; then
+    ARUBA_AK=""
+    ARUBA_AS=""
+    ARUBA_TK=""
+    _err "You don't specify ARUBA application key and application secret yet."
+    _err "Please create you key and try again."
+    return 1
+  fi
+
+  if [ "$ARUBA_TK" != "$(_readaccountconf ARUBA_TK)" ]; then
+    _info "It seems that your aruba key is changed, let's clear consumer key first."
+    _clearaccountconf ARUBA_TK
+    _clearaccountconf ARUBA_CK
+  fi
+  _saveaccountconf_mutable ARUBA_AK "$ARUBA_AK"
+  _saveaccountconf_mutable ARUBA_AS "$ARUBA_AS"
+  _saveaccountconf_mutable ARUBA_TK "$ARUBA_TK"
+
+  ARUBA_END_POINT="${ARUBA_END_POINT:-$(_readaccountconf_mutable ARUBA_END_POINT)}"
+  if [ -z "$ARUBA_END_POINT" ]; then
+    ARUBA_END_POINT="aruba-b-it"
+  fi
+  _info "Using ARUBA endpoint: $ARUBA_END_POINT"
+  if [ "$ARUBA_END_POINT" != "aruba-b-it" ]; then
+    _saveaccountconf_mutable ARUBA_END_POINT "$ARUBA_END_POINT"
+  fi
+
+  ARUBA_API="$(_aruba_get_api $ARUBA_END_POINT)"
+  _debug ARUBA_API "$ARUBA_API"
+
+  ARUBA_CK="${ARUBA_CK:-$(_readaccountconf_mutable ARUBA_CK)}"
+  if [ -z "$ARUBA_CK" ]; then
+    _info "ARUBA consumer key is empty, Let's get one:"
+    if ! _aruba_authentication; then
+      _err "Can not get consumer key."
+      #return and wait for retry.
+      return 1
+    fi
+  fi
+
+  #_info "Checking authentication and get domain details"
+
+  #if ! _aruba_rest GET "api/domains/dns/$_domain/details" || _contains "$response" "error" || _contains "$response" "denied"; then
+  #  _err "The consumer key is invalid: $ARUBA_CK"
+  #  _err "Please retry to create a new one."
+  #  _clearaccountconf ARUBA_CK
+  #  return 1
+  #fi
+  #domainData=$(echo "$response" | tr -d '\r')
+  ## get all Ids and peek only values
+  #temp="$(echo "$domainData" | _egrep_o "Id\": [^,]*" | cut -d : -f 2 | head -1)" # first element is zone Id
+  #domain_id=$temp
+  #_info "DomainId is: $domain_id"
+  _info "Consumer key is ok."
+  return 0
+}
+
+########  Public functions #####################
+
+#Usage: add  _acme-challenge.www.domain.com   "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
+dns_aruba_add() {
+  fulldomain=$1
+  txtvalue=$2
+  #_debug _domain "$_domain"
+  #_sub_domain="_acme-challenge"
+  if ! _initAuth; then
+    return 1
+  fi
+
+  _debug "First detect the root zone"
+  if ! _get_root "$fulldomain"; then
+    _err "invalid domain"
+    return 1
+  fi
+  _info "Get domain details"
+
+  if ! _aruba_rest GET "api/domains/dns/$_domain/details" || _contains "$response" "error" || _contains "$response" "denied"; then
+    _err "Error reading domn details for : $_domain"
+    return 1
+  fi
+  domainData=$(echo "$response" | tr -d '\r')
+  # get all Ids and peek only values
+  temp="$(echo "$domainData" | _egrep_o "Id\": [^,]*" | cut -d : -f 2 | head -1)" # first element is zone Id
+  domain_id=$temp
+  _info "DomainId is: $domain_id"
+
+  _debug "Check if _acme-challenge record exists in " "$_domain"
+  if ! _extract_record_id "$fulldomain."; then # notice dot at the end, aruba TXT is like this: _acme-challenge.www.domain.com.
+    _method="POST"
+  else
+    _method="PUT"
+  fi
+
+  _payload="{ \"IdDomain\": $domain_id, \"Type\": \"TXT\", \"Name\": \"$_sub_domain\", \"Content\": \"\\\"$txtvalue\\\"\" }"
+
+  _info "Adding record"
+  if _aruba_rest "$_method" "api/domains/dns/record" "$_payload"; then
+    if _contains "$response" "$txtvalue"; then
+      _aruba_rest GET "api/domains/dns/$_domain/details"
+      _debug "Refresh:$response"
+      _info "Added, sleep 10 seconds."
+      _sleep 10
+      return 0
+    fi
+  fi
+  _err "Add txt record error."
+  return 1
+}
+
+#fulldomain
+dns_aruba_rm() {
+  fulldomain=$1
+  txtvalue=$2
+
+  if ! _initAuth; then
+    return 1
+  fi
+
+  _sub_domain="_acme-challenge"
+  _debug "Getting TXT record to delete: $fulldomain."
+  if ! _extract_record_id "$fulldomain."; then
+    return 1
+  fi
+
+  _debug "Deleting TXT record: $fulldomain. Id: $_recordId"
+  if ! _aruba_rest DELETE "api/domains/dns/record/$_recordId"; then
+    return 1
+  fi
+  return 0
+}
+
+####################  Private functions below ##################################
+
+#_acme-challenge.www.domain.com
+#returns
+# _sub_domain=_acme-challenge.www
+# _domain=domain.com
+_get_root() {
+  domain=$1
+  i=2
+  p=1
+  while true; do
+    h=$(printf "%s" "$domain" | cut -d . -f $i-100)
+    if [ -z "$h" ]; then
+      #not valid
+      return 1
+    fi
+    _debug "doamin to check: $h"
+    if ! _aruba_rest GET "api/domains/dns/$h/details"; then
+      return 1
+    fi
+
+    if ! _contains "$response" "error" >/dev/null && ! _contains "$response" "denied" >/dev/null; then
+      _sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
+      _domain="$h"
+      return 0
+    fi
+    p=$i
+    i=$(_math "$i" + 1)
+  done
+  return 1
+}
+
+# returns TXT record and put it in_record_id, if esists
+_extract_record_id() {
+  subdomain="$1"
+  _ids="$(echo "$domainData" | _egrep_o '"Id": [^,]+' | cut -d : -f 2)"
+  #_debug "$_ids"
+  #_temp="$(echo $domainData | grep -oP "\"DomainId\":\s\d{1,}," | tr -d ' ')"
+  #_domainids="$(echo $_temp | tr -d ' ')"
+  _names="$(echo "$domainData" | _egrep_o '"Name": [^,]*' | cut -d : -f 2)"
+  _debug "$_names"
+  ARRAY_IDS=$(echo "$_ids" | tr ", " "\n")
+  ARRAY_NAMES=$_names
+  j=0
+  for i in $ARRAY_NAMES; do
+    if [ "$i" = "$subdomain" ]; then
+      _debug printf "%s\t%s\n" "$i"
+      #_arrayname=$i
+      _arrayId=$j
+      _info "Found txt record id: $_arrayId"
+    fi
+    j=$(_math "$j" + 1)
+  done
+  n=0
+  for i in $ARRAY_IDS; do
+    if [ "$n" = "$_arrayId" ]; then
+      _recordId=$i
+      _info "recordid found: $_recordId"
+      return 0
+    fi
+    n=$(_math "$n" + 1)
+  done
+  return 1
+}
+
+_aruba_authentication() {
+  export _H1="Content-Type: application/x-www-form-urlencoded"
+  export _H2="Authorization-Key: $ARUBA_TK"
+  _H3=""
+  _H4=""
+
+  _arubadata="grant_type=password&username=$ARUBA_AK&password=$ARUBA_AS"
+
+  response="$(_post "$_arubadata" "$ARUBA_API/auth/token")"
+  _debug "$(_post "$_arubadata" "$ARUBA_API/auth/token")"
+  _debug3 response "$response"
+
+  access_token="$(echo "$response" | _egrep_o "access_token\":\"[^\"]*\"" | cut -d : -f 2 | tr -d '"')"
+  if [ -z "$access_token" ]; then
+    _err "Unable to get access_token"
+    return 1
+  fi
+  _secure_debug access_token "$access_token"
+
+  ARUBA_CK="$access_token"
+  _saveaccountconf ARUBA_CK "$ARUBA_CK"
+  return 0
+}
+
+_aruba_rest() {
+  m=$1
+  ep="$2"
+  data="$3"
+  _debug "$ep"
+
+  _aruba_url="$ARUBA_API/$ep"
+  _debug2 _aruba_url "$_aruba_url"
+
+  export _H1="Content-type: application/json"
+  export _H2="Accept: application/json"
+  export _H3="Authorization: Bearer $ARUBA_CK"
+  export _H4="Authorization-Key: $ARUBA_TK"
+  export _H5="Accept: application/json"
+  _debug2 _H3 "$_H3"
+  _debug2 _H4 "$_H4"
+  if [ "$data" ] || [ "$m" = "POST" ] || [ "$m" = "PUT" ] || [ "$m" = "DELETE" ]; then
+    _debug data "$data"
+    response="$(_post "$data" "$_aruba_url" "" "$m")"
+  else
+    response="$(_get "$_aruba_url")"
+  fi
+
+  if [ "$?" != "0" ] || _contains "$response" "wrong credentials" || _contains "$response" "Unprocessable" || _contains "$response" "denied"; then
+    _err "Response error $response"
+    return 1
+  fi
+  _debug2 response "$response"
+  return 0
+}