Developer Releases Open-Source Self-Deploying DNS Firewall Appliance for ISPs
A developer has built Sentinel DNS, an open-source DNS firewall appliance designed for ISPs and large corporate networks, built on Rocky Linux and Unbound. The system features unattended Kickstart installation and automatically tunes its own performance based on available hardware, including expanding Linux kernel UDP buffers up to 16MB to handle heavy traffic loads. A standout feature is a real-time 3D Network Operations Center dashboard built with Three.js, which visualises geographic threat arcs connecting local clients to blocked malware sources worldwide. For resilience, the appliance implements RFC 8767, allowing it to serve cached DNS records for up to 24 hours if upstream root servers go offline or face a DDoS attack. The project is publicly available on GitHub and aims to eliminate the manual Linux tuning typically required to deploy high-performance DNS infrastructure.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in