TechnitiumSoftware/DnsServer
DnsServer
DnsServer is a recursive and authoritative DNS server that provides domain name resolution and zone hosting. It functions as both a recursive resolver, performing iterative lookups across the internet, and an authoritative manager for primary and secondary DNS zones.
The system distinguishes itself through high-availability clustering and a programmable HTTP API for automating server configurations and bulk record management. It supports a wide range of encrypted transport protocols, including TLS, HTTPS, and QUIC, and allows for custom functionality via a plugin-based request interception framework.
Its capability surface includes DNSSEC zone signing and validation, network-level ad and malware filtering through blocklists, and DNS64 translation for IPv6 to IPv4 mapping. It also provides DHCP scope and lease management, real-time traffic monitoring, and a web-based graphical interface for administration.
The software can be deployed as a background system service or as a Docker container.
Features
- DNS Servers - Functions as a comprehensive recursive and authoritative DNS server with a web-based administration interface.
- Authoritative and Recursive DNS Services - Directs network traffic to correct IP addresses using both authoritative and recursive DNS functions.
- Recursive DNS Resolvers - Functions as a full recursive DNS resolver that performs iterative lookups across the internet.
- Recursive DNS Resolution - Performs iterative lookups across the internet to translate domain names into final IP addresses.
- Configuration Synchronizers - Mirrors administrative settings and security lists from a primary node to secondary nodes.
- High Availability Clustering - Synchronizes administrative settings and security lists across nodes to ensure high availability.
- Cluster State Synchronization - Synchronizes common settings, blocked lists, and zones across multiple nodes for centralized management.
- Authoritative DNS Hosting - Provides authoritative hosting for primary and secondary DNS zones to serve as the source of truth for resolution.
- Authoritative Zone Hosting - Manages domain name records to act as the official source of truth for DNS resolution.
- Automated DNS Managers - Provides a programmable HTTP API to automate the addition and import of DNS records.
- DNS Forwarding Routing - Sends queries to external servers using standard, conditional, or encrypted protocols.
- DNS Management Tools - Serves as an authoritative manager for primary and secondary DNS zones with support for DNSSEC signing.
- DNS Query Routers - Directs DNS queries to external upstream servers using various transport protocols.
- DNS Record Updaters - Provides tools to add, update, and delete individual resource records within authoritative zones.
- DNS Resolution - Translates human-readable domain names into IP addresses through a recursive resolution process.
- DNS Services - Provides an authoritative DNS service managing primary and secondary zones as a source of truth.
- Domain Name Systems - Translates human-readable domain names into IP addresses via recursive lookups or authoritative sources.
- DNS Record Signing - Digitally signs DNS records using public key cryptography to prevent spoofing and cache poisoning.
- Network Transport Protocols - Supports DNS queries across UDP, TCP, TLS, HTTPS, and QUIC transport protocols.
- Primary-Secondary Synchronization - Propagates record changes from a primary server to secondary servers to ensure high availability.
- Zone Lifecycle Management - Handles the creation, cloning, and deletion of zones along with import and export of zone files.
- Content Filtering - Provides network-level filtering of DNS queries against blocklists to prevent ads and tracking domains from resolving.
- DNS Security - Secures DNS queries and responses using encrypted transport protocols including TLS, HTTPS, and QUIC.
- DNSSEC Zone Signing - Manages the lifecycle of public and private keys to digitally sign DNS records for data integrity.
- DNSSEC Response Verification - Verifies response authenticity across various protocols and forwarders to prevent cache poisoning.
- DNSSEC Signature Validation - Verifies digital signatures of incoming DNS responses to ensure data has not been tampered with.
- Domain Name Blocking - Prevents resolution of specific domains using custom block lists or predefined zones.
- Domain Blocklists - Provides tools for adding and importing domain allow and block lists to control network-wide resolution.
- Encrypted DNS Resolvers - Sends DNS requests to upstream providers using encrypted protocols to ensure secure server communication.
- Multi-Protocol Resolvers - Supports DNS resolution across multiple transport protocols including UDP, TCP, TLS, HTTPS, and QUIC.
- Web-Based Configuration Dashboards - Provides a graphical interface for managing settings to avoid manual text file edits.
- DNS Cluster Orchestration - Coordinates multiple server instances from a single console to synchronize configurations, zones, and security policies.
- DNS Management GUIs - Provides a visual interface to configure domain resolution settings without using a command line.
- Web-Based Server Administration Panels - Configures and monitors server settings through a web-based graphical interface.
- Dynamic DNS - Modifies zone records using standard authentication and security policies to restrict specific record changes.
- Caching and Performance - Implements advanced caching, prefetching, and latency-based selection to reduce DNS resolution time.
- DNS Caches - Allows clearing specific cached entries or flushing the entire DNS cache to ensure record freshness.
- Cluster Bootstrapping - Initializes and joins clusters to synchronize configuration and zones between nodes.
- Global Server Settings - Defines server-wide listening endpoints, transport protocols, and resolution policies.
- API Token Management - Creates long-term and single-use tokens for programmatic automation without manual login.
- Rate Limiters - Caps the number of incoming DNS requests to protect the server from DDoS and amplification attacks.
- Real-time Configuration Updates - Updates DNS records programmatically in real-time without requiring service restarts.
- Catalog Zone Provisioning - Uses specialized catalog zones to automatically create and update secondary or stub zones on remote servers.
- DNS64 Translation - Implements DNS64 translation to map IPv6 client requests to IPv4 servers.
- Lease Management - Manages DHCP address allocations, allowing conversion between dynamic and reserved states.
- Scope Configuration - Configures DHCP IP address ranges and lease times to automate network addressing.
- DNS Query Name Minimization - Implements query name minimization to improve user privacy by limiting information sent to upstream recursive servers.
- Bulk Record Management - Implements a programmatic HTTP interface for bulk modification of DNS and DHCP entries.
- Resolution Optimizers - Queries multiple name servers concurrently and selects the fastest validating response to optimize resolution latency.
- DNS Routing Overrides - Provides mechanisms to override live DNS responses to redirect traffic or enforce service modes.
- DNS Zone Discovery - Syncs primary and secondary zones to multiple servers using catalog zones for clustering.
- DNS Zone Transfers - Implements zone transfer management including incremental updates to synchronize records between servers.
- DNS64 Translation - Maps IPv6 client requests to IPv4 servers by synthesizing IPv6 addresses from IPv4 records.
- EDNS Client Subnet Routing - Transmits client network information via EDNS to enable location-aware DNS responses from upstream servers.
- DNS-Based Ad Blockers - Filters network traffic by blocking the resolution of advertisement, tracker, and malware domains.
- Recursion Access Control - Specifies permitted and denied networks for recursive lookups to prevent open resolver abuse.
- Latency-Based Path Selection - Selects the fastest recursive name server response based on real-time latency measurements.
- Traffic Filtering Rulesets - Provides the ability to block ads, trackers, and malicious domains using curated rulesets.
- Zone-Specific Configurations - Sets query access rules, transfer permissions, and notification settings for specific zones.
- DNSSEC Key Synchronization - Distributes cryptographic keys across cluster nodes to ensure consistent DNSSEC signing for shared zones.
- Granular Permission Systems - Assigns granular view, modify, and delete permissions to users and groups across server administration sections.
- API Request Authentication - Secures API calls using session tokens generated via credentials and two-factor authentication.
- DNS Rebinding Prevention - Blocks malicious DNS rebinding attempts to prevent external websites from accessing local network resources.
- Network Traffic Filters - Blocks unwanted domains and malware using custom blocklists and regular expressions at the DNS level.
- Role-Based Access Control - Secures administrative functions by assigning specific management roles and permissions to users.
- Secure Zone Transfers - Synchronizes zone data between servers using secure transport options like TLS and QUIC.
- DNS Security Policies - Enforces domain integrity through the use of security policies and specific cryptographic records.
- Two-Factor Authentication - Provides time-based one-time password (TOTP) verification for securing access to the administration panel.
- Dynamic DNS Responses - Allows the creation of class libraries that intercept requests to generate dynamic DNS responses.
- Plugin-Based Logic Extensions - Provides a plugin-based framework to intercept and modify DNS responses based on custom business logic.
- Request Interception Middleware - Allows custom class libraries to intercept and modify DNS responses using request interception middleware.
- Administrative APIs - Provides a programmable HTTP interface for executing administrative tasks and managing server configurations.
- Multi-Node Management - Provides a single administrative panel to control and monitor multiple server nodes.
- DNS Traffic Monitoring - Provides real-time statistics and detailed logging of DNS queries and server activity.
- Server Metrics - Exposes internal server performance data and health metrics, including query volume, via dashboards.
- Server Management APIs - Offers a programmable HTTP interface for automating server management and configuration via third-party scripts.
- DNS Management - Authoritative DNS server with ad-blocking capabilities.
- 网络基础设施 - Listed in the “Network Infrastructure” section of the Awesome Selfhosted awesome list.
