semihalev/sdns
A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy. observed · 2026-10-18
Health v2 · maintenance only
99/100
- Activity 100
- Release rhythm 98
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 10
- age_days: 2941
- days_rel: 18
- days_push: 3
- n_releases_24m: 22
Adoption not part of the score
1086 stars · 73 forks observed · 2026-10-18
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
SDNS is a high-performance recursive DNS resolver server written in Go, with DNSSEC validation and a privacy-first design supporting DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC. It uses a middleware architecture, ships as a self-contained binary with packages for Linux, macOS, and Docker, and includes a Kubernetes DNS middleware for resolving cluster names.
Use cases
- run my own recursive dns resolver server
- self-host a privacy-focused dns server
- validate dnssec on dns queries
- encrypt dns queries with dns-over-https, dns-over-tls, or dns-over-quic
- stop my isp from tracking or hijacking dns lookups
- resolve kubernetes service and pod names with a custom resolver
- fast caching dns resolver for a home or office network
When to choose
- You need a full recursive resolver with DNSSEC validation rather than a simple forwarding cache
- Privacy matters: you want encrypted upstream queries and minimal data exposure to third-party resolvers
- You want a lightweight single Go binary that deploys easily via Docker, brew, snap, or prebuilt binaries
- You run Kubernetes and want cluster-internal DNS names served through your own resolver middleware
When to avoid
- You only need a minimal DNS forwarder for a small LAN, where dnsmasq is simpler
- You need an authoritative nameserver to host your own public zones; SDNS is a recursive resolver
- You want a point-and-click web UI with ad-blocking blocklists out of the box, which Pi-hole or AdGuard Home provide
Facets
service · maturity active
networking privacy security caching middleware self-hosted networking privacy security self-hosted windows cross-platform self-hosted go cli dns-resolver dns-server dnssec dns-over-https dns-over-tls dns-over-quic recursive-resolver edns privacy-focused kubernetes-dns devops linux macos docker kubernetes
3 sources
- readme: https://github.com/semihalev/sdns · fetched 2026-10-18 · fd045bd4d415
- homepage: https://sdns.dev · fetched 2026-08-29 · a75ab321796b
- site_page: https://sdns.dev/middleware/kubernetes · fetched 2026-08-29 · 8c6957039c48
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| semihalev/sdns | main | 99 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem