tsig

[deprecated, developmeht moved to https://github.com/mirage/ocaml-dns] µDNS - an opinionated Domain Name System (DNS) library

Golang library to support additional TSIG methods for DNS queries

Manage dynamic and static DNS-records from web frontend including simple DynDNS support.

A clean web interface for managing PowerDNS authoritative DNS servers

Let's Encrypt ssl cert management via Dehydrated with tsig dns-01 verification and Sophos UTM update hooks.

The RFC 2136 to anything proxy. Make DNS-01 challenges more secure and compatible with every provider.

High-performance, secondary-only authoritative DNS server written in Rust.

Rust SDK for programmatic BIND9 DNS server management — rndc wire protocol, RFC 2136 dynamic updates, AXFR/IXFR zone transfers, zone file parsing, and statistics API. Ships as a Rust crate, Node.js native addon (napi-rs), and CLI tool.

A docker image to run bind supporting TSIG dynamic updates

Ansible lookup plugin for generating/reading BIND-compatible TSIG key files

Convert TSIG key format from KNOT to BIND, and from BIND to KNOT

TSIG-signed RFC 2136 DNS UPDATE multiplexer and proxy for multi-target fanout.

Ansible role for Bind DNS deployement with DNSSEC/TSIG/Views

Self-hosted DynDNS + TLS reverse proxy in one static Go binary. RFC2136/TSIG updates to your own BIND, DynDNS2-compatible, ACME DNS-01 certs without ports 80/443, zero-open-ports tunneling for your LAN.

Dynamic DNS update client for BIND-compatible nameservers (A, AAAA, CNAME, PTR) using nsupdate with TSIG key authentication

DISA STIG hardened root DNS — BIND 9.16 hidden primary + FRR/BGP anycast with per-node ASNs on Oracle Linux 8

Install and configure ISC Kea v3 DHCP natively via apt packages on Ubuntu Resolute (26.04 LTS).

DISA STIG hardened BIND 9.16 authoritative DNS on Oracle Linux 8 - hidden primary + secondaries, TSIG hmac-sha384 zone transfers, DNSSEC via dnssec-policy. Air-gapped variant included.

Federated end-to-end encrypted messaging over DNS. Identity = DNS name. No central directory, no phone numbers, no servers to trust.

Rust SDK and CLI for the DNS Mesh Protocol