For an open source tool for managing DNS, the first results are powerdns-admin/powerdns-admin (PowerDNS-Admin is a full-featured web interface for managing PowerDNS servers, providing exactly the zone management, record editing, REST API, role-based access control, and dynamic DNS updates this search targets), powerdns/pdns (PowerDNS is a mature, open-source authoritative DNS server with a REST API and support for zone file import/export, DNSSEC, and dynamic updates, making it an ideal self-hosted DNS management tool) and digitalplatdev/freedomain (FreeDomain is a domain lifecycle management platform with an API-driven orchestration layer and web UI for managing DNS configurations, making it a suitable DNS management tool for administrators, though it focuses more on domain registration than pure DNS server functionality). coredns/coredns and tenta-browser/tenta-dns round out the shortlist. Compare the match explanations and check the project documentation against your requirements.
Find the best open-source DNS management tools. Compare top-rated GitHub repositories by features and activity to pick the right one for your needs.
PowerDNS-Admin is a web-based management interface and administration tool for PowerDNS. It provides a graphical dashboard to manage DNS zones and resource records, replacing the need for manual configuration file edits or command line tools. The system implements a role-based access control layer to restrict zone visibility and administrative functions based on assigned user permissions. It includes a dedicated server monitor for tracking the health, configuration, and performance statistics of PowerDNS backend servers. The platform covers a broad range of administrative capabilities, inclu
PowerDNS-Admin is a full-featured web interface for managing PowerDNS servers, providing exactly the zone management, record editing, REST API, role-based access control, and dynamic DNS updates this search targets.
PowerDNS is DNS server software used for serving authoritative and recursive DNS records. It functions as both an authoritative DNS server, providing definitive records for specific domains from trusted databases, and a recursive DNS resolver that finds answers for any domain by iteratively querying external servers. The project distinguishes itself through a backend-abstraction layer that decouples server logic from data storage, allowing records to be served from SQL databases, zone files, and external APIs. It includes a geo-aware DNS router to direct users to the nearest server based on t
PowerDNS is a mature, open-source authoritative DNS server with a REST API and support for zone file import/export, DNSSEC, and dynamic updates, making it an ideal self-hosted DNS management tool.
FreeDomain is a centralized platform for managing the full lifecycle of domain names, providing services for free registration and web presence activation. It offers a unified administrative interface that allows users to secure digital identities across multiple top-level extensions and configure hosting environments through a guided setup process. The platform distinguishes itself through an API-driven orchestration layer that automates interactions with external registrars and simplifies complex infrastructure management by abstracting DNS configurations into standardized zone file updates
FreeDomain is a domain lifecycle management platform with an API-driven orchestration layer and web UI for managing DNS configurations, making it a suitable DNS management tool for administrators, though it focuses more on domain registration than pure DNS server functionality.
CoreDNS is a modular domain name system server designed for cloud-native environments. It functions as a flexible DNS resolver and forwarder that manages network traffic by routing queries based on zone-based rules and authoritative data. The server is built to integrate with service discovery systems, enabling it to map service names to network addresses within containerized infrastructure. The project is defined by a plugin-based request pipeline that allows for the extension of server functionality through custom modules. These plugins can intercept, modify, or log network requests in real
CoreDNS is a modular DNS server that serves and routes DNS records with zone file support, but it lacks a built‑in web UI and REST API for record management, making it a narrower fit than a full‑featured DNS administration tool.
Tenta DNS is a recursive and authoritative domain name server implementation written in Go. It provides secure network resolution services by translating human-readable domain names into machine addresses while enforcing cryptographic standards to ensure data privacy and authenticity. The software distinguishes itself through a focus on secure transport and integrity verification. It utilizes encrypted tunnels for upstream communication to prevent eavesdropping and incorporates a validation engine to verify digital signatures on resource records. To manage global traffic, the system supports
Tenta DNS is a recursive and authoritative DNS server with DNSSEC and DNS-over-TLS, so it covers the DNS serving side but lacks the web management UI and REST API for record management you’re looking for.
ExternalDNS is a controller that automatically synchronizes Kubernetes resource states with external DNS providers. It monitors cluster resources such as services, ingresses, and gateway APIs to dynamically create and update DNS records, enabling automated service discovery and external traffic management. The project features a provider-agnostic interface that supports a wide array of cloud-managed vendors and on-premises providers, as well as an extension system for custom providers via webhooks and sidecars. It implements a reconciliation loop that uses resource annotations and custom reso
ExternalDNS is a Kubernetes controller that automates DNS record synchronization with external providers, not a standalone DNS management tool or server — it lacks a web UI, REST API for direct record management, zone file import/export, and DNSSEC support, so it fits a specific DevOps automation niche rather than the general self-hosted DNS administration you're seeking.
This project is a containerized dynamic DNS update client designed to automate the synchronization of domain records with changing public IP addresses. It functions as a multi-provider synchronization engine that monitors network connectivity and updates DNS records across various cloud platforms and custom services to ensure consistent domain resolution. The system distinguishes itself through a provider-based adapter pattern that abstracts diverse third-party APIs into a unified interface, allowing for consistent record management. It employs multi-source IP discovery to mitigate rate limit
This repository is a dynamic DNS update client that automates record synchronization for changing IPs, but it is not a full DNS management tool or server—it lacks zone file handling, DNSSEC, and multi-tenant access controls.
Register is a GitOps domain registrar and subdomain registration service that uses version-controlled configuration files to manage domain ownership and mappings. It functions as a DNS management system and record orchestrator, utilizing JSON-based declarative configurations to programmatically update A, CNAME, MX, and TXT records. The project distinguishes itself through a registration process where domain ownership and subdomain assignments are stored as the source of truth within Git repositories. It includes an automated SSL provisioning tool to configure web servers and security certific
Register is a GitOps service for registering and managing subdomains with declarative configs, but it is not a general self-hosted DNS server or full administration tool—it focuses on granting subdomains on a shared parent domain, missing most core DNS management features like zone file handling, full record types, DNSSEC, and a dedicated web UI.
phpipam is a web-based IP address management system and network asset manager used for tracking IPv4 and IPv6 address allocations, subnet masks, and network metadata. It functions as a centralized registry for coordinating virtual local area networks, routing instances, and DNS records. The platform includes data center infrastructure management capabilities to map physical hardware rack layouts and device placements. It also operates as a network scanner that identifies active addresses and monitors network capacity by automatically scanning subnets. The system provides a REST API for progr
phpipam is primarily an IP address management (IPAM) system that can also manage DNS records, but it is not a dedicated DNS server or full DNS management tool—it lacks explicit zone file import/export and DNSSEC support, and its core focus is subnet tracking rather than DNS serving.
This project is a Go DNS library used for implementing DNS clients and servers. It provides a toolkit for packet exchange, record parsing, and the development of custom nameservers. The library includes a DNS server framework and a zone manager for parsing standard zone files and synchronizing data via zone transfers. It features a dedicated DNSSEC implementation library for generating cryptographic keys and validating signatures, as well as a TLS transport for encrypted connections between clients and servers. The system covers a broad range of capabilities including DNS resolver functional
This repository is a Go DNS library for building custom DNS servers and clients, not a ready-to-use management server or web interface, so while it supports core protocol features and DNSSEC, it lacks the web UI, REST API, and multi-tenant administration this search requires.
Sandstorm is an open-source platform that packages and runs web applications in security-hardened sandboxes on a personal server, functioning as a self-hosted web app operating system. It provides a curated app store where users discover and install sandboxed web applications with one-click ease, while each application runs in an isolated container that uses Linux kernel security features to separate it from the host and other apps. The platform includes a centralized authentication layer so users sign in once and gain access to all installed applications without managing separate accounts per
Sandstorm is a self-hosting platform for web apps, not a dedicated DNS management tool or server; its dynamic DNS features are incidental to app hosting, not a comprehensive DNS administration solution.
OpenWrt is a modular Linux distribution designed for resource-constrained networking hardware. It functions as a comprehensive network routing platform, providing a complete build environment that allows users to generate custom firmware images for a wide variety of embedded processor architectures. By utilizing a standardized cross-compilation toolchain and a package-based ecosystem, it enables the creation of tailored operating systems for specific hardware deployments. The project distinguishes itself through a hardware abstraction layer that normalizes interactions across diverse chipsets
OpenWrt is a Linux distribution for routers and embedded devices, not a dedicated DNS management tool or server; while it can host DNS services through packages, this repository itself does not offer the web UI, REST API, or zone-file handling needed for managing records directly.
| Repository | Stars | Language | License | Last push |
|---|---|---|---|---|
| powerdns-admin/powerdns-admin | 2.8K | Python | MIT | |
| powerdns/pdns | 4.3K | C++ | gpl-2.0 | |
| 180K |
| HTML |
| AGPL-3.0 |
| coredns/coredns | 14.1K | Go | Apache-2.0 |
| tenta-browser/tenta-dns | 1.6K | Go | Apache-2.0 |
| kubernetes-sigs/external-dns | 9K | Go | Apache-2.0 |
| qdm12/ddns-updater | 3.1K | Go | MIT |
| is-a-dev/register | 9.6K | JavaScript | gpl-3.0 |
| phpipam/phpipam | 2.7K | PHP | — |
| miekg/dns | 8.7K | Go | BSD-3-Clause |