- Home
- DNS Server Software
- Knot Resolver
On the recordRead 1 Oct 202615 facts
Knot Resolver
Prague, Czech Republic
Plans and prices
Open source
Free
completely free to download and use · GPL license
Read 1 Oct 2026 · knot-resolver.cz
Professional support
Priced on request
SLA · NDA · tailored support and consultancy contracts
Read 1 Oct 2026 · knot-resolver.cz
On the record
- Architecture
- Its core architecture is tiny and efficient, with rich features implemented as optional modules to limit attack surface and improve performance.knot-resolver.cz · read 1 Oct 2026
- DNSSEC
- DNSSEC validation is enabled by default and the resolver supports RFC 5011 automated trust-anchor updates and RFC 7646 negative trust anchors.knot-resolver.cz · read 1 Oct 2026
- Docker limitation
- The documentation warns that running the container with a software-defined network such as Kubernetes will likely cause performance losses.knot-resolver.cz · read 1 Oct 2026
- Encrypted DNS
- The documentation lists DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC among supported networking protocols.knot-resolver.cz · read 1 Oct 2026
- Extensibility
- The modular architecture provides a state-machine-like API for extensions, and C and Lua modules can tap into the resolution process.knot-resolver.cz · read 1 Oct 2026
- Installation
- Official installation guidance covers Debian/Ubuntu repositories, Fedora/RHEL derivatives/openSUSE packages, source releases, and an official Docker image.knot-resolver.cz · read 1 Oct 2026
- Latest release
- The site lists Knot Resolver 6.5.0 as released on October 1, 2026.knot-resolver.cz · read 1 Oct 2026
- Management
- The documentation provides an HTTP API and the kresctl utility for management.knot-resolver.cz · read 1 Oct 2026
- Monitoring integrations
- Statistics can be exported to Graphite, InfluxDB, or Metronome, or exposed through a Prometheus metrics endpoint.knot-resolver.cz · read 1 Oct 2026
- Performance
- The server uses a no-threading, shared-nothing architecture except for optionally shared cache, and instances can be reconfigured without downtime.knot-resolver.cz · read 1 Oct 2026
- Purpose
- Knot Resolver is a caching DNS resolver scalable from huge resolver farms down to home network routers.knot-resolver.cz · read 1 Oct 2026
- Security reporting
- Sensitive security issues can be reported using the listed contact address and associated PGP keyring.knot-resolver.cz · read 1 Oct 2026
- Security testing
- The code is continuously checked by an extensive testing suite for stability, interoperability, performance regressions, and security-related problems.knot-resolver.cz · read 1 Oct 2026
- Support
- Users can choose free support through public channels or professional support with SLA and NDA.knot-resolver.cz · read 1 Oct 2026
