Technitium DNS Server
Block ads & malware at the DNS level for your entire network
Technitium



Technitium DNS Server is an open source authoritative, as well as recursive, DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration.
šØ This major release upgrades to .NET 9 runtime and includes important security fixes. All cluster nodes must be upgraded together to maintain compatibility.
Key highlights in this release:
- Fixed Denial of Service vulnerability in rate limiting implementation with redesigned QPM options
- Fixed Cache Poisoning vulnerability through IP fragmentation attacks
- Fixed DNSSEC Downgrade vulnerability that could bypass validation
- Added Clustering feature to manage multiple DNS server instances from a single console
- Added Two-factor authentication (2FA) support with TOTP
- Added MISP Connector App to block malicious domains from MISP feeds
- Updated Advanced Blocking App with configurable TTL for blocked responses
- Enhanced Log Exporter App with EDNS logging support
- Improved support for comment entries in Allow/Block List URLs
- Multiple bug fixes for zone file parsing, session validation, and app configuration loading
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
This release includes several improvements:
- Added support for importing zone files when creating new zones
- Enhanced web GUI with customizable lists and improved zone record filtering
- Fixed DNS-over-QUIC connection handshake issue
- Updated Query Logs app with database VACUUM option
- Improved Geo apps with macro variable support for simpler configuration
- Added Ed25519 and Ed448 DNSSEC algorithm support
- Enabled use of user-specified DNSSEC private keys
- Improved DNS log output options and zone file parser compatibility
- Removed NS Revalidation feature due to complexity and resolution issues
- Introduced app preference ordering and updated several apps for it
- Improved DNS admin panel flexibility and log exporter header configuration
- Multiple minor fixes and usability enhancements
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
This release includes several improvements:
- Fixed high memory usage with "Last Year" dashboard filter
- Resolved DNSSEC and CD/DO flag issues
- Added spoofed DNS detection with TCP fallback
- Enabled query log export to CSV via API/GUI
- Added Log Exporter, MySQL, and SQL Server logging apps
- Improved support for MariaDB in MySQL app
- Fixed Linux binding issue in Block Page App
- Fixed over-matching in Drop Requests App
- Various minor fixes and improvements
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
This release includes several improvements:
- Added new queue mechanism to handle large numbers of DNS requests more efficiently
- Added new options to configure minimum SOA Refresh and SOA Retry values
- Improved self-signed certificate generation with better address handling
- Fixed several stability issues affecting DNS services
- Multiple other improvements and bug fixes
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
- Fixed issue with DNS-over-TLS and DNS-over-TCP protocols that would cause the underlying connection to close if original request gets canceled
- Minor bug fixes and improvements
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
This release includes several new features and improvements:
- Implemented Catalog Zones support for automatic DNS zone provisioning
- Added new Secondary Forwarder zone support
- Introduced Query Access feature for configuring access to individual zones
- Added support for Expiry TTL for records in zones
- Implemented concurrency in recursive resolver for improved performance
- Added latency-based name server selection algorithm
- Implemented ZONEMD validation support for Secondary zones
- Added support for Responsible Person (RP) record
- Introduced Network Access Control Lists for Recursion, Zone Transfer, and Dynamic Updates
- Improved brute force protection for admin web service
- Multiple other minor bug fixes and improvements
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
This release includes several new features and improvements:
- Added support for NAPTR record type
- New Default Responsible Person option in Settings for adding Primary Zones
- Updated Serve Stale implementation with configurable Answer TTL, Reset TTL, and Max Wait Time options
- Improved SVCB/HTTPS record implementation with automatic IP address hints
- Updated TXT record implementation for better RFC 6763 support
- New Filter AAAA App for preferring IPv4 connections on dual-stack setups
- Multiple bug fixes and improvements
Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md
- Version14.2.0
- CategoryNetworking
- Source codePublic
- Developed by
- Submitted by
- Compatible withumbrelOS 0.5 or later
