semihalev/sdns
A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy. observed · 2026-09-03
Health v2 · maintenance only
100/100
- Activity 100
- Release rhythm 100
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 10
- age_days: 2893
- days_rel: 1
- days_push: 0
- n_releases_24m: 20
Adoption not part of the score
1076 stars · 69 forks observed · 2026-09-03
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
SDNS is a high-performance recursive DNS resolver server written in Go, with DNSSEC validation and a privacy-first design supporting DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC. It uses a middleware architecture, ships as a self-contained binary with packages for Linux, macOS, and Docker, and includes a Kubernetes DNS middleware for resolving cluster names.
Use cases
- run my own recursive dns resolver server
- self-host a privacy-focused dns server
- validate dnssec on dns queries
- encrypt dns queries with dns-over-https, dns-over-tls, or dns-over-quic
- stop my isp from tracking or hijacking dns lookups
- resolve kubernetes service and pod names with a custom resolver
- fast caching dns resolver for a home or office network
When to choose
- You need a full recursive resolver with DNSSEC validation rather than a simple forwarding cache
- Privacy matters: you want encrypted upstream queries and minimal data exposure to third-party resolvers
- You want a lightweight single Go binary that deploys easily via Docker, brew, snap, or prebuilt binaries
- You run Kubernetes and want cluster-internal DNS names served through your own resolver middleware
When to avoid
- You only need a minimal DNS forwarder for a small LAN, where dnsmasq is simpler
- You need an authoritative nameserver to host your own public zones; SDNS is a recursive resolver
- You want a point-and-click web UI with ad-blocking blocklists out of the box, which Pi-hole or AdGuard Home provide
Facets
service · maturity active
networking privacy security caching middleware self-hosted networking privacy security self-hosted windows cross-platform self-hosted go cli dns-resolver dns-server dnssec dns-over-https dns-over-tls dns-over-quic recursive-resolver edns privacy-focused kubernetes-dns devops linux macos docker kubernetes
3 sources
- readme: https://github.com/semihalev/sdns · fetched 2026-09-03 · fd045bd4d415
- homepage: https://sdns.dev · fetched 2026-08-29 · a75ab321796b
- site_page: https://sdns.dev/middleware/kubernetes · fetched 2026-08-29 · 8c6957039c48
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| semihalev/sdns | main | 100 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem