The quiet power
behind every query.
Serious DNS engineering. A refreshingly small footprint.
Meet the building blocks of a network that answers to you.
One request.
A thoughtful journey.
Explore the core responsibilities behind a DNS answer.
Select a stage to see how the pieces fit together.
Access controls, response policies, and blocklists decide which queries belong on your network. Recursion can be restricted to trusted clients.
query → ACL / RPZ / blocklistSome things should
stay between us.
Protect the path between clients and your server with encrypted DNS. Use DNSSEC validation to check signed answers, and sign the zones you control.
Configure encrypted DNSDoH
DNS over HTTPSDNS queries over an HTTPS connection.
DoT
DNS over TLSA dedicated, TLS-encrypted DNS transport.
DoQ
DNS over QUICEncrypted DNS using the QUIC protocol.
ODoH
Oblivious DNS over HTTPSSeparate the client identity from its query.
A little more intention.
A lot less noise.
Use hosts-style lists, URL sources, or simple domain-per-line blocklists. Add RPZ policies and access rules to shape how your server answers.
Keep authoritative answers available while restricting recursion to trusted networks. Configure DNS Cookies and response rate limiting for additional control.
Make it your ownA solid foundation.
At any scale.
From a single node to a connected cluster.
Keep your DNS infrastructure in your own hands.
Built-in persistence
Embedded KV and write-ahead logging keep zone state durable. No external database to add to your stack.
Connected by design
Gossip and Raft clustering support different consistency needs. Configure nodes, peers, and encrypted cluster communication.
A world of answers
AXFR / IXFR transfers, slave zones, split-horizon views, and GeoIP responses give your DNS room to adapt.
Work the way
you think.
Click, script, or automate. The embedded dashboard, command-line tool, and REST API put the same server within reach.
Explore managementThe dashboard
An embedded React dashboard with zone management and WebSocket query streaming.
The command line
Use dnsctl to inspect your server, manage zones, query records, and work with the cache.
The REST API
Build on the management API with OpenAPI / Swagger documentation.
Client libraries
Official Python, TypeScript, Go, C# and Java SDKs wrap the server management API.
Make room for
a better internet.
Start with your DNS. Build the rest on your terms.