TechnitiumSoftware/DnsServer

Features

• DNS Servers - Functions as a comprehensive recursive and authoritative DNS server with a web-based administration interface.
• Authoritative and Recursive DNS Services - Directs network traffic to correct IP addresses using both authoritative and recursive DNS functions.
• Recursive DNS Resolvers - Functions as a full recursive DNS resolver that performs iterative lookups across the internet.
• Recursive DNS Resolution - Performs iterative lookups across the internet to translate domain names into final IP addresses.
• Configuration Synchronizers - Mirrors administrative settings and security lists from a primary node to secondary nodes.
• High Availability Clustering - Synchronizes administrative settings and security lists across nodes to ensure high availability.
• Cluster State Synchronization - Synchronizes common settings, blocked lists, and zones across multiple nodes for centralized management.
• Authoritative DNS Hosting - Provides authoritative hosting for primary and secondary DNS zones to serve as the source of truth for resolution.
• Authoritative Zone Hosting - Manages domain name records to act as the official source of truth for DNS resolution.
• Automated DNS Managers - Provides a programmable HTTP API to automate the addition and import of DNS records.
• DNS Forwarding Routing - Sends queries to external servers using standard, conditional, or encrypted protocols.
• DNS Management Tools - Serves as an authoritative manager for primary and secondary DNS zones with support for DNSSEC signing.
• DNS Query Routers - Directs DNS queries to external upstream servers using various transport protocols.
• DNS Record Updaters - Provides tools to add, update, and delete individual resource records within authoritative zones.
• DNS Resolution - Translates human-readable domain names into IP addresses through a recursive resolution process.
• DNS Services - Provides an authoritative DNS service managing primary and secondary zones as a source of truth.
• Domain Name Systems - Translates human-readable domain names into IP addresses via recursive lookups or authoritative sources.
• DNS Record Signing - Digitally signs DNS records using public key cryptography to prevent spoofing and cache poisoning.
• Network Transport Protocols - Supports DNS queries across UDP, TCP, TLS, HTTPS, and QUIC transport protocols.
• Primary-Secondary Synchronization - Propagates record changes from a primary server to secondary servers to ensure high availability.
• Zone Lifecycle Management - Handles the creation, cloning, and deletion of zones along with import and export of zone files.
• Content Filtering - Provides network-level filtering of DNS queries against blocklists to prevent ads and tracking domains from resolving.
• DNS Security - Secures DNS queries and responses using encrypted transport protocols including TLS, HTTPS, and QUIC.
• DNSSEC Zone Signing - Manages the lifecycle of public and private keys to digitally sign DNS records for data integrity.
• DNSSEC Response Verification - Verifies response authenticity across various protocols and forwarders to prevent cache poisoning.
• DNSSEC Signature Validation - Verifies digital signatures of incoming DNS responses to ensure data has not been tampered with.
• Domain Name Blocking - Prevents resolution of specific domains using custom block lists or predefined zones.
• Domain Blocklists - Provides tools for adding and importing domain allow and block lists to control network-wide resolution.
• Encrypted DNS Resolvers - Sends DNS requests to upstream providers using encrypted protocols to ensure secure server communication.
• Multi-Protocol Resolvers - Supports DNS resolution across multiple transport protocols including UDP, TCP, TLS, HTTPS, and QUIC.
• Web-Based Configuration Dashboards - Provides a graphical interface for managing settings to avoid manual text file edits.
• DNS Cluster Orchestration - Coordinates multiple server instances from a single console to synchronize configurations, zones, and security policies.
• DNS Management GUIs - Provides a visual interface to configure domain resolution settings without using a command line.
• Web-Based Server Administration Panels - Configures and monitors server settings through a web-based graphical interface.
• Dynamic DNS - Modifies zone records using standard authentication and security policies to restrict specific record changes.
• Caching and Performance - Implements advanced caching, prefetching, and latency-based selection to reduce DNS resolution time.
• DNS Caches - Allows clearing specific cached entries or flushing the entire DNS cache to ensure record freshness.
• Cluster Bootstrapping - Initializes and joins clusters to synchronize configuration and zones between nodes.
• Global Server Settings - Defines server-wide listening endpoints, transport protocols, and resolution policies.
• API Token Management - Creates long-term and single-use tokens for programmatic automation without manual login.
• Rate Limiters - Caps the number of incoming DNS requests to protect the server from DDoS and amplification attacks.
• Real-time Configuration Updates - Updates DNS records programmatically in real-time without requiring service restarts.
• Catalog Zone Provisioning - Uses specialized catalog zones to automatically create and update secondary or stub zones on remote servers.
• DNS64 Translation - Implements DNS64 translation to map IPv6 client requests to IPv4 servers.
• Lease Management - Manages DHCP address allocations, allowing conversion between dynamic and reserved states.
• Scope Configuration - Configures DHCP IP address ranges and lease times to automate network addressing.
• DNS Query Name Minimization - Implements query name minimization to improve user privacy by limiting information sent to upstream recursive servers.
• Bulk Record Management - Implements a programmatic HTTP interface for bulk modification of DNS and DHCP entries.
• Resolution Optimizers - Queries multiple name servers concurrently and selects the fastest validating response to optimize resolution latency.
• DNS Routing Overrides - Provides mechanisms to override live DNS responses to redirect traffic or enforce service modes.
• DNS Zone Discovery - Syncs primary and secondary zones to multiple servers using catalog zones for clustering.
• DNS Zone Transfers - Implements zone transfer management including incremental updates to synchronize records between servers.
• DNS64 Translation - Maps IPv6 client requests to IPv4 servers by synthesizing IPv6 addresses from IPv4 records.
• EDNS Client Subnet Routing - Transmits client network information via EDNS to enable location-aware DNS responses from upstream servers.
• DNS-Based Ad Blockers - Filters network traffic by blocking the resolution of advertisement, tracker, and malware domains.
• Recursion Access Control - Specifies permitted and denied networks for recursive lookups to prevent open resolver abuse.
• Latency-Based Path Selection - Selects the fastest recursive name server response based on real-time latency measurements.
• Traffic Filtering Rulesets - Provides the ability to block ads, trackers, and malicious domains using curated rulesets.
• Zone-Specific Configurations - Sets query access rules, transfer permissions, and notification settings for specific zones.
• DNSSEC Key Synchronization - Distributes cryptographic keys across cluster nodes to ensure consistent DNSSEC signing for shared zones.
• Granular Permission Systems - Assigns granular view, modify, and delete permissions to users and groups across server administration sections.
• API Request Authentication - Secures API calls using session tokens generated via credentials and two-factor authentication.
• DNS Rebinding Prevention - Blocks malicious DNS rebinding attempts to prevent external websites from accessing local network resources.
• Network Traffic Filters - Blocks unwanted domains and malware using custom blocklists and regular expressions at the DNS level.
• Role-Based Access Control - Secures administrative functions by assigning specific management roles and permissions to users.
• Secure Zone Transfers - Synchronizes zone data between servers using secure transport options like TLS and QUIC.
• DNS Security Policies - Enforces domain integrity through the use of security policies and specific cryptographic records.
• Two-Factor Authentication - Provides time-based one-time password (TOTP) verification for securing access to the administration panel.
• Dynamic DNS Responses - Allows the creation of class libraries that intercept requests to generate dynamic DNS responses.
• Plugin-Based Logic Extensions - Provides a plugin-based framework to intercept and modify DNS responses based on custom business logic.
• Request Interception Middleware - Allows custom class libraries to intercept and modify DNS responses using request interception middleware.
• Administrative APIs - Provides a programmable HTTP interface for executing administrative tasks and managing server configurations.
• Multi-Node Management - Provides a single administrative panel to control and monitor multiple server nodes.
• DNS Traffic Monitoring - Provides real-time statistics and detailed logging of DNS queries and server activity.
• Server Metrics - Exposes internal server performance data and health metrics, including query volume, via dashboards.
• Server Management APIs - Offers a programmable HTTP interface for automating server management and configuration via third-party scripts.
• DNS Management - Authoritative DNS server with ad-blocking capabilities.
• Network Infrastructure - Listed in the “Network Infrastructure” section of the Awesome Selfhosted awesome list.

Star history