authoritative-dns

Modern self-hosted DNS administration UI for PowerDNS Authoritative - RBAC, OIDC SSO, audit log, DNSSEC, multi-backend (clusters & primary/secondary). A maintained alternative to PowerDNS-Admin.

Fast, safe DNS server written in Rust. Recursive resolver + authoritative + DNS-over-TLS + DNSSEC + RPZ filtering in a single static binary. 437K QPS, 32µs latency. Memory-safe alternative to Unbound and BIND. MIT licensed. Linux, FreeBSD, macOS.

Lightweight authoritative DNS server with UDP, TCP and DNS-over-TLS, TOML zones, and local or S3-compatible storage.

A simple DNS Server can be used to create Authoritative Servers as well, pending zone setup and configuration.

DNS server in Go for cloud infrastructures

edns.upset.dev — Tiny authoritative DNS + HTTP service that reveals your recursive resolver and its EDNS Client Subnet.

A high-performance, production-ready authoritative DNS server built with Rust, powering Cybertemp's domain management infrastructure. Handles DNS queries, domain verification, and dynamic record management with PostgreSQL and Supabase integration.

Stateless, high-throughput authoritative DNS server backed by ScyllaDB with a gRPC control plane for managing zones and records.

GeoDNS routing policy for PowerDNS using Lua, MaxMind GeoLite2, and EDNS Client Subnet-aware resolver logic.

dns raspberry-pi homelab self-hosted adblocking go dnssec ddns pihole-alternative

Enterprise Authoritative PowerDNS Web Control Plane in Native PHP & PDO. Zero-Framework, Air-Gapped Zero-CDN, 2FA TOTP, Multi-Server Clustering, In-Memory Caching & RFC-Compliant Engine.

Lightweight authoritative-only DNS server written in Rust

DISA STIG hardened BIND 9.16 authoritative DNS on Oracle Linux 8 - hidden primary + secondaries, TSIG hmac-sha384 zone transfers, DNSSEC via dnssec-policy. Air-gapped variant included.

Self-hosted xip-style authoritative DNS server with an ACME DNS-01 API

A high-performance authoritative GeoDNS server built on io_uring and ScyllaDB. Features zero-latency mmap hot loading, split-horizon proxy routing, and Response Rate Limiting (RRL) for edge networks.

Recursive DNS resolver with authoritative zones, block list filtering, DoT and DoH, and a live control plane

An authoritative DNS server with a web interface you don't need a manual for

A hands-on DNS penetration-testing lab built with BIND9 to explore DNS architecture, enumeration, misconfigurations, attacks, exploitation techniques, and security hardening.

Public ADNS is a free, public authoritative DNS service. Your zones are served from dual-stack name servers with automatic DNSSEC signing (ECDSAP256SHA256). No web panel — zones are managed by file.

Authoritative DNS server that synthesizes IPv6 reverse (PTR) and forward (AAAA) records on the fly — no zone file for a /64. Rust reimplementation of AllKnowingDNS.