Knot Resolver

Knot Resolver is a minimalistic implementation of a caching validating DNS resolver. Modular architecture keeps the core tiny and efficient, and it provides a state-machine like API for extensions.

Users

• Daemon
  • Configuration
  • CLI interface
  • Control sockets
  • Utilizing multiple CPUs
  • Using CLI tools
• Modules
  • Static hints
  • Statistics collector
  • Query policies
  • Views and ACLs
  • Prefetching records
  • HTTP/2 services
  • DNS-over-HTTP (DoH)
  • DNS Application Firewall
  • Rebinding protection
  • Graphite module
  • Etcd module
  • DNS64
  • Renumber
  • DNSSEC validation failure logging
  • Name Server Identifier (NSID)
  • Workarounds
  • Dnstap
  • Signaling Trust Anchor Knowledge in DNSSEC
  • Sentinel for Detecting Trusted Root Keys
  • Priming module
  • System time skew detector
  • Detect discontinuous jumps in the system time
  • Root on loopback (RFC 7706)
  • Cache prefilling
  • Serve stale
  • EDNS keepalive
  • Experimental DNS-over-TLS Auto-discovery

• Upgrading
• Release notes

Experts

• Building from sources
  • Dependencies
  • Compilation
  • Tests
  • HTML Documentation
  • Tarball
  • Packaging
  • Docker image

Developers

• Knot Resolver library
  • Requirements
  • For users
  • For developers
  • Writing layers
  • APIs in Lua
  • API reference
• Modules API reference
  • Supported languages
  • The anatomy of an extension
  • Writing a module in Lua
  • Writing a module in C
  • Configuring modules
  • Exposing C module properties

Indices and tables

• Index
• Module Index
• Search Page