v1.2.19 · OPEN POSSIBILITIES.

Less noise.
More network.

A powerful DNS server. A quieter internet.
Secure, shape, and own your network with one
self-contained, open-source binary.

Self-hostedNo subscriptionsMIT licensed
SCROLL TO DISCOVERDNS, WITHOUT THE BAGGAGE.
SMALL FOOTPRINT.
BIG POSSIBILITIES.
One Go binaryEncrypted transportsYour infrastructureAlways open source
01BUILT DIFFERENT

Everything DNS.
Nothing you don’t need.

From your home lab to your production stack.
One thoughtfully connected toolkit, without
a pile of moving parts.

01 / PRIVACY

Your queries.
For your eyes.

DoH, DoT, DoQ, and ODoH. Modern encrypted transports, with DNSSEC to verify the answer.

Explore encrypted DNS
02 / CONTROL

A filter for the noise.
Not the possibilities.

Shape your traffic with blocklists, response policies, and access controls. Your rules come first.

Meet your policy engine
03 / RESILIENCE

Start small.
Stay connected.

Built-in storage, zone transfers, and gossip or Raft clustering. Grow into a network that fits.

See the architecture
02A LITTLE CLARITY

Meet your network.
Really meet it.

A built-in dashboard that brings your DNS into focus.
Follow queries, manage zones, and see your policies
at work. No extra service to wire up.

Explore the control center
nothingdns / control centerINTERACTIVE PREVIEW
MY NETWORK / OVERVIEW

A clearer picture.

SAMPLE DATA
Total queries 24,892queriesIllustrative daily traffic
Queries blocked 2,984queries12.0% of sample requests
Cache hit rate 86.4%Illustrative cache activity
Query activity
ResolvedBlocked
1.5k1.0k5000
00:0006:0012:0018:0023:59
Your network, a little quieter.Try pausing policy filtering in this preview.
YOUR DATA STAYS ON YOUR SERVERREACT DASHBOARD
TRY THE TABS AND FILTER SWITCHILLUSTRATIVE DATA · YOUR INSTANCE, YOUR METRICS
MORE POSSIBILITIES, SAME SMALL CORE

Always moving.
Still yours.

v1.2.19Released Oct 10, 2026
AUTHORITATIVE CACHING

Your zones.
Ready for the next query.

Local zone answers can now be cached too. A zone change takes effect immediately, while published record TTLs stay intact.

Meet your answer cache
OFFICIAL CLIENT LIBRARIES

Your server.
Your language.

Bring zone management, cache controls, and monitoring into the tools you already build with.

Start with the SDKs
03SPEAKS YOUR LANGUAGE

Old foundations.
New possibilities.

Standards where they matter. Flexibility where you need it. NothingDNS brings the DNS essentials and modern protocols together.

Under the hood

The essentials

UDP · TCP · Authoritative · Recursive

FOUNDATION

Private by design

DoH · DoT · DoQ · ODoH

ENCRYPTED

Answers you can trust

DNSSEC validation & zone signing

VERIFIED

Ready for what’s next

DNS64 · SVCB / HTTPS · IDNA

MODERN
A STARTING POINT THAT FITS

Your network.
Your first recipe.

A home lab, an iterative resolver, or a zone of your own. Turn a few choices into a small, readable configuration.

Build your configuration
NOTHINGDNS.YAMLLOCAL FIRST
Choose your starting pointHome lab · Resolver · Local zone
Keep the essentialsLocal listener · Cache · DNSSEC
server:
  port: 5353
  bind: [127.0.0.1]

cache:
  enabled: true
Make it yours
04LESS SETUP. MORE DOING.

Your next good decision.
One command away.

LINUX. MACOS. WINDOWS.
MAKE YOURSELF AT HOME.
$
curl -fsSL https://raw.githubusercontent.com/NothingDNS/NothingDNS/main/install.sh | bash
The script installs and configures NothingDNS.Installation guide
Prefer containers? Docker and Kubernetes deployment assets are in the repository.Explore deployment options
A LITTLE CLARITY

Good questions.
Straight answers.

Still curious?
Talk to the project

01Does NothingDNS need a database service?

No external database service is required. NothingDNS includes its own KV storage and write-ahead logging, alongside the DNS server and embedded dashboard.

See the foundation
02Can I use it at home and serve my own zones?

Yes. You can forward queries to upstream resolvers, resolve iteratively, and serve authoritative zone data. Start locally, then adapt listeners and access controls to your own network.

Find your starting point
03Is encrypted DNS the same as DNSSEC?

They solve different problems. DoH, DoT, DoQ, and ODoH protect DNS transport. DNSSEC validates signed DNS data. NothingDNS lets you configure them independently.

Explore encrypted DNS
04Can I automate management?

Use dnsctl, the REST management API, or the official Python, TypeScript, Go, C#, and Java SDKs. The client libraries manage the server; they do not perform DNS wire-protocol lookups.

Explore client libraries
05Where do I get a release or report a problem?

Download platform binaries with their SHA-256 checksums here, or browse releases on GitHub. Bug reports and contributions belong in the project repository.

Choose a download
THE NETWORK IS YOURS

Make room for
a better internet.

Start with your DNS. Build the rest on your terms.