DNSViz
What it is
DNSViz visualizes DNS zone status to help people understand and troubleshoot DNSSEC. It maps a domain's authentication chain and resolution path, while identifying configuration errors. Its graph can display delegations, record sets, DNSKEY and DS records, signatures, negative responses, wildcards, warnings, and errors. DNS data is classified as secure, bogus, or insecure according to whether a chain of trust reaches a trust anchor. The web service can run new analyses, but it is in maintenance mode: historical analyses cannot be loaded and new results cannot be saved to its database. For command-line use, its suite can query DNS, assess results, and create graph or text output. Queries use recursive resolvers by default, or authoritative servers when requested. Graph output can be an image, DOT graph, or HTML file. DNSViz is open source and documents installation on Linux, macOS, FreeBSD, and other Python-supported environments, as well as use through Docker. It also documents pre-deployment checks for proposed zone and delegation changes.
For and against
For
- Shows DNSSEC authentication chains and resolution paths.
- Classifies data as secure, bogus, or insecure.
- Command-line tools can produce graph or text output.
- Documents pre-deployment testing for zone changes.
Against
- Web service cannot load historical analyses.
- New web results cannot be saved to its database.
- Installation lists several Python and system dependencies.
The verdict
DNSViz offers detailed DNSSEC analysis through a web visualization and command-line suite. The web service's maintenance-mode limits are important if saved or historical analyses are needed.
Who it suits
DNSViz suits people who need to inspect DNSSEC configuration or test proposed zone changes. Its web and command-line tools offer options for both visual and text-based analysis.
Plans and prices
DNSViz
No pricing or plan details stated; web analysis cannot load historical results or save new ones
Read 3 Oct 2026 · dnsviz.net
On the record
- Analysis
- It visually analyzes a domain’s DNSSEC authentication chain and resolution path, and lists detected configuration errors.dnsviz.net · read 3 Oct 2026
- Analysis inputs
- The probe command accepts one or more domain names and queries recursive resolvers by default or authoritative servers when requested, serializing results as JSON.github.com · read 2 Oct 2026
- Command line
- The command-line tool provides probe, grok, graph, print, and query subcommands.github.com · read 3 Oct 2026
- Container
- A ready-to-use Docker container is available as dnsviz/dnsviz.github.com · read 3 Oct 2026
- Dependencies
- The documented dependencies include Python, dnspython, pygraphviz, and cryptography.github.com · read 3 Oct 2026
- DNSSEC graph
- Its visualization covers zones, delegations, resource record sets, negative responses, DNSKEY and DS records, NSEC/NSEC3, signatures, CDNSKEY/CDS, wildcards, node status, warnings, and errors.dnsviz.net · read 2 Oct 2026
- Installation
- The project README lists installation through package repositories including Debian, Ubuntu, Fedora, Gentoo, FreeBSD, and EPEL for specified RHEL and CentOS versions, as well as macOS through Homebrew or MacPorts.github.com · read 2 Oct 2026
- Install platforms
- The project documents packages for Debian, Ubuntu, Fedora, Gentoo, FreeBSD, RHEL and CentOS, plus Mac installation through Homebrew or MacPorts.github.com · read 3 Oct 2026
- Intended users
- The project describes DNSViz as a resource for understanding and troubleshooting DNSSEC deployment.dnsviz.net · read 2 Oct 2026
- Maintenance status
- The web service is in maintenance mode and cannot access its back-end database, load historical analyses, or save new analyses there.dnsviz.net · read 3 Oct 2026
- Open source
- The DNSViz source repository identifies its license as GPL-2.0.github.com · read 3 Oct 2026
- Optional DNSSEC support
- GOST DNSSEC algorithm and digest support requires the OpenSSL GOST Engine and M2Crypto.github.com · read 3 Oct 2026
- Output formats
- The graph command can output an image, a dot file, or an HTML file, including interactive HTML.github.com · read 3 Oct 2026
- Pre-deployment testing
- DNSViz documents pre-deployment testing for zones and proposed delegation, glue, and DS record changes.github.com · read 3 Oct 2026
- Purpose
- DNSViz visualizes DNS zone status to help understand and troubleshoot DNSSEC deployment.dnsviz.net · read 3 Oct 2026
- Query sources
- The probe command can query recursive DNS servers by default or authoritative DNS servers.github.com · read 3 Oct 2026
- Security and compliance
- The opened DNSViz pages describe DNSSEC analysis and verification features but make no security certification or compliance claim.dnsviz.net · read 2 Oct 2026
- Support
- The website invites users to submit questions, comments, and feedback.dnsviz.net · read 3 Oct 2026
