Last Hour Last Day Last Week Last Month Last Year

100

100%

Total Queries

Cache Hit

No Error

Server Failure

Name Error

Refused

Blocked

Clients

Allowed Zones

Blocked Zones

Top Query Type

Top Clients

Client	Queries
127.0.0.1	100
::1	10

Top Domains

Domain	Hits
example.com	10

Top Blocked Domains

Domain	Hits
blocked.example.com	10

technitium.com

Type

Name

Value

TTL
Type

Name

Master Name Server

Responsible Person

Serial

Refresh

Retry

Expire

Minimum

TTL
Type

Name

Exchange

Preference

TTL
Type

Name

Service

Protocol

Priority

Weight

Port

Target

TTL
Type

Name

Value

Exchange

Preference

Service

Protocol

Priority

Weight

Port

Target

TTL

technitium.com

Server

This Server (this-server)
Recursive Query (recursive-resolver)
Cloudflare (1.1.1.1)
Cloudflare (1.0.0.1)
Cloudflare ([2606:4700:4700::1111])
Cloudflare ([2606:4700:4700::1001])
Cloudflare TLS (cloudflare-dns.com (1.1.1.1:853))
Cloudflare TLS (cloudflare-dns.com (1.0.0.1:853))
Cloudflare TLS (cloudflare-dns.com ([2606:4700:4700::1111]:853))
Cloudflare TLS (cloudflare-dns.com ([2606:4700:4700::1001]:853))
Cloudflare HTTPS (https://cloudflare-dns.com/dns-query)
Cloudflare HTTPS-JSON (https://cloudflare-dns.com/dns-query)
Google (8.8.8.8)
Google (8.8.4.4)
Google ([2001:4860:4860::8888])
Google ([2001:4860:4860::8844])
Google TLS (dns.google (8.8.8.8:853))
Google TLS (dns.google (8.8.4.4:853))
Google TLS (dns.google ([2001:4860:4860::8888]:853))
Google TLS (dns.google ([2001:4860:4860::8844]:853))
Google HTTPS-JSON (https://dns.google.com/resolve)
Quad9 Secure (9.9.9.9)
Quad9 Secure ([2620:fe::fe])
Quad9 Secure TLS (dns.quad9.net (9.9.9.9:853))
Quad9 Secure TLS (dns.quad9.net ([2620:fe::fe]:853))
Quad9 Secure HTTPS (https://dns.quad9.net/dns-query)
Quad9 Unsecure (9.9.9.10)
Quad9 Unsecure ([2620:fe::10])
Quad9 Unsecure HTTPS (https://dns10.quad9.net/dns-query)
OpenDNS (208.67.222.222)
OpenDNS (208.67.220.220)
OpenDNS ([2620:0:ccc::2])
OpenDNS ([2620:0:ccd::2])
Level3 (4.2.2.1)
Level3 (4.2.2.2)
Ultra (156.154.70.1)
Ultra (156.154.71.1)
Dyn (216.146.35.35)
Dyn (216.146.36.36)
a.root-servers.net
b.root-servers.net
c.root-servers.net
d.root-servers.net
e.root-servers.net
f.root-servers.net
g.root-servers.net
h.root-servers.net
i.root-servers.net
j.root-servers.net
k.root-servers.net
l.root-servers.net
m.root-servers.net

Domain

Type

Protocol

DNS Server Domain

The primary domain name used by this DNS Server to identify itself.

DNS Server Local Addresses

Local addresses are the network interface IP addresses you want the DNS Server to listen for requests.

To apply DNS Server local address changes, you will need to manually restart the main service.

Web Service Port

Specify the TCP port number for this web console.

To apply web service port changes, you will need to manually restart the main service.

Optional DNS Server Protocols

Enable DNS-over-HTTP

Enable this option to accept DNS-over-HTTP requests for both wire and json response formats. It must be used with a TLS terminating reverse proxy like nginx and will work only on private networks.

Enable DNS-over-TLS

Enable this option to accept DNS-over-TLS requests.

Enable DNS-over-HTTPS

Enable this option to accept DNS-over-HTTPS requests for both wire and json response formats.

TLS Certificate File Path

Specify a PKCS #12 certificate (.pfx) file path on the server. The certificate must contain private key.

TLS Certificate Password

Enter the certificate (.pfx) password, if any.

To enable or disable these protocols, you will need to manually restart the main service. For DNS-over-HTTP, use http://localhost:8053/dns-query with a TLS terminating reverse proxy like nginx. For DNS-over-TLS, use tls-certificate-domain:853 and for DNS-over-HTTPS use https://tls-certificate-domain/dns-query to configure supported DNS clients.

IPv6 Support

Prefer IPv6

DNS Server will use IPv6 for querying whenever possible with this option enabled.

Use this option only if this DNS server has native IPv6 Internet access otherwise it will affect performance.

Logging

Log All Queries

Enable this option to log every query received by this DNS Server and the corresponding response answers into the log file.

Enabling query logging will significantly increase the log file size. Error and audit logs are enabled by default.

Recursive Resolver

Allow Recursion

Enable recursion to allow this DNS Server to resolve any domain name.

Allow Recursion Only For Private Networks

Enable this option if you want to support recursion only on private networks. Any recursive request from public network will be refused.

Disable recursion if you wish this server to act only as authoritative name server for the configured zones.

Prefetch Eligibility

(recommended 2)

The minimum initial TTL value of a record needed to be eligible for prefetching.

Prefetch Trigger

(recommended 9; set 0 to completely disable prefetching)

A record with TTL value less than trigger value will initiate prefetch operation immediately for itself.

Auto Prefetch Sample Interval

minutes (valid range 1-60; default 5)

The interval to sample eligible domain names from last hour stats for auto prefetch.

Auto Prefetch Sample Eligibility

hits/hour (default 30)

Minimum required hits per hour for a domain name to be eligible for auto prefetch.

The DNS Server cache auto prefetch option can keep eligible domain names from last hour stats "hot" in cache. Sample eligibility value can be decided by keeping an eye on the hits shown for last hour on the dashboard. Experiment with sample interval and sample eligibility to get best results.

Block List URLs

Quick Add

Enter block list URL one below another in the above text field or use the Quick Add list to add known block list URLs.

DNS Server will use the data returned by the block list URLs to update the blocked zone automatically every 24 hours. The expected file format is standard hosts file format or plain text file containing list of domains to block.

Help: Blocking Internet Ads Using DNS Sinkhole

Network Proxy

No Proxy (default)

HTTP Proxy

SOCKS5 Proxy

Proxy Address

Proxy Port

Username

Password

When proxy server is configured, DNS Server will use it for all outbound network requests.

Forwarders

Quick Select

Enter forwarder DNS Server IP addresses or URLs one below another in above text field or use the Quick Select list to select desired forwarder.

Forwarder Protocol

DNS-over-UDP (default)

DNS-over-TCP

DNS-over-TLS

DNS-over-HTTPS

DNS-over-HTTPS (JSON)

Select a protocol that this DNS server must use to query the forwarders specified above.

Forwarders are DNS servers which this DNS Server should use to resolve recursive queries. If no forwarders are configured then this DNS server will use preconfigured ROOT SERVERS to perform recursive resolution.

Help: Configuring DNS Server For Privacy & Security

20171012

Technitium DNS Server

Version

Copyright (C) 2019 Shreyas Zare (shreyas@technitium.com)
This program comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions.

Source code available under GNU General Public License v3.0 on GitHub

Help Topics

Read the latest online help topics which contains the DNS Server user manual and covers frequently asked questions.

Support

For support, send an email to support@technitium.com.

Follow @technitium on Twitter.
Checkout Technitium Blog.

Become A Patron

Make contribution to Technitium by becoming a Patron and help making new software, updates, and features possible.

Become A Patron Now!