Everything a DNS server should do
Open a card for the details. The limits and the exact commands are in the docs.
Zones
- Hosted zones for your own domains
- Secondaries over AXFR, any primary
- Forwarders, in the order you choose
- Forward zones: the VPN, the office
- A cache sized for the board
- Mix them: host, copy, forward
Blocking
- Lists in hosts, adblock, RPZ and more
- Your own deny and allow lists
- Overrides that apply live and win
- Pause for minutes or a day, live
- A size check stops a feed that broke
- Canary, soak, then the rest, or revert
Reliability
- Two or more nodes, no leader
- Rolling updates, one node at a time
- Signed with your key; no replays
- Answering 15 s after power-on
- Nodes stand alone, controller or not
- Extras can fail; queries still answered
Management
- Web flasher coming
- Web controller in one container
- Its builder flashes boards over USB
- One encrypted backup file
- Configs as files, with history
- Your own signing key
Visibility
- Query log from every node
- Privacy setting for client addresses
- Live charts: queries, hits, blocks
- Health with the reason, and an LED
- Prometheus metrics on every node
Hardware
- About a watt: no fan, no disk
- $20–40 a board, with microSD
- Wired Ethernet, PoE where fitted
- Wi-Fi as a fallback
- One image per chip; boards are data
Tested: Guition JC-ESP32P4-M3-DEV, Seeed XIAO ESP32S3 Sense and Waveshare ESP32-S3-ETH.