DNS (18)

• Free Plan Overview (cloudflare.com) organisation
  what Cloudflare hands out at no cost: DDoS protection, CDN, DNS, TLS and basic load balancing
  Caching Free Tier TLS #
• Lego :: ACME client and library written in Go. (ACME client and library written in Go.) reference
  ACME certificate issuance and renewal via HTTP-01, TLS-ALPN-01 or DNS-01 across 200+ DNS providers
  PKI TLS #
• Dnsmasq - network services for small networks. (thekelleys.org.uk) reference
  lightweight DNS forwarder plus DHCP, router advertisement and network boot for routers and firewalls
  DHCP Network Routing #
• BIND 9 Administrator Reference Manual — BIND 9 9.20.26 documentation (bind9.readthedocs.io) reference
  authoritative and resolver setup, zone files, DNSSEC signing and validation, plus dig and named manpages
  DNSSEC Network Diagnostic #
• Unbound - About (NLnet Labs) tool
  validating recursive caching resolver with DNS-over-TLS/HTTPS and QNAME minimisation, BSD licence
  DNSSEC Privacy #
• NSD - About (NLnet Labs) tool
  authoritative-only name server built for TLD and root-scale query rates, BSD licensed, paid SLA option
  Commercial Support #
• Knot DNS (knot-dns.cz) tool
  Authoritative-only DNS server with IXFR, DDNS, rate limiting and automatic DNSSEC signing, GPL 3+
  DNSSEC #
• Knot Resolver (knot-resolver.cz) tool
  caching validating resolver from CZ.NIC with modular features and DoH; GPL, free to download
  Caching DNSSEC #
• PowerDNS Authoritative Nameserver - PowerDNS Authoritative Server documentation (doc.powerdns.com) reference
  authoritative nameserver serving zones from MySQL/PostgreSQL, BIND files or JSON APIs via backends
  Relational Database #
• dnsdist Overview - dnsdist documentation (dnsdist.org) reference
  DoS- and abuse-aware DNS load balancer, runtime console, Lua or YAML config, Prometheus metrics
  Load Balancing Security Hardening #
• CoreDNS: DNS and Service Discovery (coredns.io) tool
  Go DNS server chaining plugins for zone files, Kubernetes and cloud service discovery, Apache-2.0
  Kubernetes #
• Root Server Technical Operations Association (root-servers.org) organisation
  live inventory of the 366 root name server sites: operator, global vs local, IPv6 and instance counts
  Root Server #
• https://www.rfc-editor.org/rfc/rfc1035.html (rfc-editor.org) reference
  1987 DNS specification: message format, resource records, resolver and name-server behaviour
  Internet Standard #
• https://www.rfc-editor.org/rfc/rfc8484.html (rfc-editor.org) reference
  IETF Standards Track spec mapping each DNS query-response pair onto an HTTPS exchange
  HTTP Privacy #
• DNSViz | A DNS visualization tool (dnsviz.net) tool
  Web visualiser for a zone's DNSSEC authentication chain and resolution path, flagging errors
  DNSSEC Network Diagnostic #
• dmarc.org – Domain Message Authentication Reporting & Conformance (dmarc.org) reference
  DMARC email authentication and reporting over SPF/DKIM; policy, alignment, RFC 9989-9991 standards track
  Email Spam Filtering #
• Pi-hole – Network-wide Ad Blocking (pi-hole.net) tool
  DNS sinkhole you run yourself; point router DHCP at it to filter every device, VPN included
  Ad Blocking Self Hosting #
• AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux (adguard.com) tool
  network-wide DNS filtering of ads and trackers for every device, router-installable, with parental controls
  Ad Blocking Privacy Self Hosting #