InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →
Top 23 DNS Open-Source Projects
-
awesome-selfhosted
A list of Free Software network services and web applications which can be hosted on your own servers
Project mention: Show HN: Canine – A Heroku alternative built on Kubernetes thats 10x cheaper | news.ycombinator.com | 2025-06-16https://en.wikipedia.org/wiki/Category:Cloud_platforms
awesome-selfhosted has a serverless / FaaS category that just links to awesome-sysadmin > PaaS: https://github.com/awesome-selfhosted/awesome-selfhosted#sof...
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
-
nps
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)
-
Nacos
an easy-to-use dynamic service discovery, configuration and service management platform for building AI cloud native applications.
-
Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
wget https://github.com/XTLS/Xray-core/releases/download/v25.3.6/Xray-linux-64.zip unzip Xray-linux-64.zip chmod +x xray mv xray /usr/bin/xray
-
AdGuard Home - Network-wide DNS privacy and ad blocking
-
Also, not all SOCKS5 servers support UDP associate. Dante, 3proxy and gost support it, but ssh -D doesn't.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
Yes lots of folks[0]. At Cruise we made use of it to do split dns when were migrating from aws to gcp but dont know if it’s still used
[0] - https://github.com/coredns/coredns/blob/master/ADOPTERS.md
-
Project mention: Control your attention on the web – Block sites on certain days and times | news.ycombinator.com | 2025-03-19
That can be done at DNS level in dnscrypt-proxy: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Filters#time...
-
Personally I use a dns block list like https://github.com/hagezi/dns-blocklists with dnmasq or dnsdist. Works great :)
-
-
Project mention: Ask HN: What are good high information density UIs (screenshots, apps, sites) | news.ycombinator.com | 2025-05-08
-
Project mention: Stuff a Pi-hole in your router because your browser is about to betray you | news.ycombinator.com | 2025-03-08
My setup is on a nanopi running FriendlyWRT/OpenWRT with Docker installed. PiHole is easy to run from docker - have a look at https://github.com/pi-hole/docker-pi-hole/
-
-
smartdns
A local DNS server to obtain the fastest website IP for the best Internet experience, support DoT, DoH, DoQ. 一个本地DNS服务器，获取最快的网站IP，获得最佳上网体验，支持DoH，DoT，DoQ。
-
awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
-
Project mention: I no longer have an old-school cert on my HTTPS site | news.ycombinator.com | 2025-05-23
I don't understand the tone of aggression against ACME and their plethora of clients.
I know it isn't a skill issue because of who the author is. So I can only imagine it is some sort of personal opinion that they dislike ACME as a concept or the tooling around ACME in general.
We've been using LE for a while (since 2019 I think) for handful of sites, and the best nonsense client _for us_ was https://github.com/do-know/Crypt-LE/releases.
Then this year we've done another piece of work this time against the Sectigo ACME server and le64 wasn't quite good enough.
So we ended up trying:-
- https://github.com/certbot/certbot on GitHub Actions, it was fine but didn't quite like the locked down environment
- https://github.com/go-acme/lego huge binary, cli was interestingly designed and the maintainer was quite rude when raising an issue
- https://github.com/rmbolger/Posh-ACME our favourite, but we ended up going with certbot on GHA once we fixed the weird issues around permissions
-
MyIP
The best IP Toolbox. Easy to check what's your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more! || 🇨🇳 可能是最好用的IP工具箱。轻松检查你的 IP，IP 地理位置，检查DNS泄漏，检查 WebRTC 连接，速度测试，ping 测试，MTR测试，检查网站可用性，查询 Whois 信息等等。 (by jason5ng32)
-
-
The following Kubernetes Add-Ons were utilized for this solution which worked in conjunction with one-another. a. AWS Load Balancer Controller - An amazing AddOn which automates the creation of the AWS Application Load Balancer (based on the creation of an Ingress resource) and points this at our application pods. It also magically manages the Target Group for us so that our ALB is always pointing to our live pods. b. External DNS - Updates and manages our Route53 records to point to our load balancer (again, using the config in the Ingress resource).
-
-
Iodine is the go-to for IP-over-DNS tunneling.
https://github.com/yarrick/iodine
Back in the Before Times when my wireless telephone didn't support tethering / hotspot iodine was very handy, albeit excruciatingly slow.
Very rarely did I find a network I couldn't tunnel out of. Virtually nobody thinks about DNS exfil.
(Did a gig one time where we did live-off-the-land exfil of base64 encoded data using CERTUTIL, CMD, PING, and tcpdump running on an off-site DNS server.)
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
DNS discussion
DNS related posts
-
Getting free internet on a cruise, saving $170
-
BindToInterface – securely bind a Linux program to specific network interface
-
Why not use DNS over HTTPS (DoH)?
-
Awesome Selfhosted
-
Tools for thoughts1 Date:03/2025 Moderator:Daniel.J.Q.Goh
-
What are some app ideas that you think would benefit people on a perosnal level?
-
DNS Piracy Blocking Orders: Google, Cloudflare, and OpenDNS Respond Differently
-
A note from our sponsor - InfluxDB
www.influxdata.com | 18 Jun 2025
Index
What are some of the best open-source DNS projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | awesome-selfhosted | 232,130 |
| 2 | Pi-hole | 52,170 |
| 3 | nps | 32,601 |
| 4 | Nacos | 31,598 |
| 5 | Xray-core | 29,251 |
| 6 | AdGuardHome | 28,750 |
| 7 | gost | 16,823 |
| 8 | amass | 13,113 |
| 9 | CoreDNS | 13,063 |
| 10 | dnscrypt-proxy | 12,134 |
| 11 | dns-blocklists | 12,019 |
| 12 | gobuster | 11,979 |
| 13 | portmaster | 10,278 |
| 14 | docker-pi-hole | 9,623 |
| 15 | sliver | 9,504 |
| 16 | smartdns | 9,141 |
| 17 | awesome-hacker-search-engines | 8,799 |
| 18 | lego | 8,641 |
| 19 | MyIP | 8,455 |
| 20 | dns | 8,369 |
| 21 | external-dns | 8,258 |
| 22 | NETworkManager | 7,294 |
| 23 | iodine | 6,458 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com