Knot DNS

DNSknot-dns

High-performance authoritative DNS server with automatic DNSSEC signing.

Provider: default
Kind: DNS
Category: Edge
Official docs: https://www.knot-dns.cz/docs/latest/singlehtml/index.html

Properties · 2 set by this component

property	type	values	required	kind default	this component
anycast	boolean	—	no	false	▸ false
dnssecSigning · component property	boolean	—	no	false	inherited
geoRouting	boolean	—	no	false	inherited
healthChecked	boolean	—	no	false	inherited
keyManagement · component property	enum	manual \| automatic	no	manual	inherited
managed	boolean	—	no	true	▸ false
redundantProviders	boolean	—	no	false	inherited
responseRateLimiting · component property	boolean	—	no	false	inherited
ttlSeconds	integer	—	no	—	inherited

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Shared dependency without redundancyerror

shared-dependency-without-redundancy

The design requires redundant discovery, but this DNS or coordination service, which everything depends on, runs on a single provider or a single replica. Its failure is the whole system's failure.

— all of these hold:
— the design requirement `availability.discoveryRedundant` is true
— any of these hold:
— the node's `redundantProviders` is false
— the node's `replicated` is false

Use it in a design

nodes:
  - { id: "knot-dns", component: "knot-dns" }

Other DNS products · 33

Alibaba Cloud DNSalibaba-dnsalibabaclouddns Alibaba Cloud Domain Namesalibaba-domainsalibabaclouddns Alibaba Cloud DNS PrivateZonealibaba-private-zonealibabaclouddns Amazon Application Recovery Controller (ARC)aws-application-recovery-controllerawsdns Amazon Route 53 Global Resolveraws-route53-global-resolverawsdns Amazon Route 53 Resolver endpointaws-route53-resolverawsdns Amazon Route 53route53awsdns Azure DNSazure-dnsazuredns Azure DNS Private Resolverazure-dns-private-resolverazuredns Azure Private DNSazure-private-dnsazuredns Azure Traffic Managerazure-traffic-managerazuredns Cloudflare DNScloudflare-dnscloudflaredns Cloudflare Internal DNScloudflare-internal-dnscloudflaredns Cloudflare Registrarcloudflare-registrarcloudflaredns Cloudflare Secondary DNScloudflare-secondary-dnscloudflaredns BIND 9binddns CoreDNScorednsdns Generic DNSdnsdns DNSdns-resolverdns dnsmasqdnsmasqdns ExternalDNSexternal-dnsdns IBM NS1 Connectns1dns Pi-holepi-holedns PowerDNS Authoritative Serverpowerdnsdns Unboundunbounddns DigitalOcean DNSdigitalocean-dnsdigitaloceandns Google Cloud DNSgoogle-cloud-dnsgcpdns Cloud Domainsgoogle-cloud-domainsgcpdns IBM Cloud DNS Servicesibm-dns-servicesibmdns DNS Private Zoneoci-dns-private-zoneocidns DNS Public Zoneoci-dns-zoneocidns Traffic Management Steering Policyoci-traffic-managementocidns OpenStack Designateopenstack-designateopenstackdns

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Knot DNS: self-hosted, authoritative-only DNS server. Per the Knot DNS documentation, automatic
3# DNSSEC signing must be switched on per zone and response rate limiting is the optional mod-rrl
4# module, so neither is active in a stock configuration.
5schemaVersion: "1"
6type: "component"
7id: "knot-dns"
8kind: "dns"
9provider: "default"
10docs: "https://www.knot-dns.cz/docs/latest/singlehtml/index.html"
11defaults:
12  managed: false
13  anycast: false
14properties:
15  dnssecSigning:
16    type: "boolean"
17    default: false
18  keyManagement:
19    type: "enum"
20    values: ["manual", "automatic"]
21    default: "manual"
22  responseRateLimiting:
23    type: "boolean"
24    default: false

The same page as markdown, for an agent: /catalogue/components/knot-dns.md