A secure, modern, cross-platform & cross-architecture DNS Server built with .NET 10.0 — implementing all secure DNS protocols with clean architecture.
SecureDNS implements all secure DNS protocols — standardized or emerging — while maintaining backward compatibility with legacy DNS-over-UDP via reverse proxy.
RFC 8484 — Encrypted DNS queries over HTTP/2
RFC 7858 — Encrypted DNS using Transport Layer Security
Authenticated encryption for DNS traffic
Ethereum Name Service (ENS) integration
RFC 1035 — Classic DNS with reverse proxy support
All protocols tunneled through the Tor network
SecureDNS integrates with industry-leading services and standards for a complete DNS security solution.
Decentralized domain resolution via ENS smart contracts on Ethereum blockchain.
ens.domains →Smart contract-based DNS resolution bridging traditional DNS with blockchain.
GitHub →Comprehensive ad blocking, malware, and tracker filtering via curated filter lists.
GitHub →Full compatibility with all standard-compliant upstream DNS resolvers.
Integration with IANA Root Files and ICANN Zone Data Service for authoritative resolution.
Clean architecture, modular design, and extensible middleware pipeline make SecureDNS the ideal DNS server for security-conscious deployments.
Every DNS query encrypted. Supports TLS 1.3, HTTPS/2, and DNSCrypt for maximum privacy and security against eavesdropping.
Built-in ad blocking, malware protection, and tracker filtering through comprehensive filter list integration.
Extensible middleware architecture for request/response processing — black-holing, sink-holing, threat hunting, and custom filters.
Native Ethereum Name Service integration for decentralized domain resolution — censorship-resistant by design.
Built with modern Clean-Architecture patterns — fully modular, testable, and maintainable codebase.
Backward compatible with legacy DNS clients via built-in reverse proxy — no client-side changes required.
Watch the project overview and the original Cairo Security Camp launch talk.
A comprehensive walkthrough of the SecureDNS project, its architecture, supported protocols, and security features.
The project officially launched at Cairo Security Camp on September 22, 2019. This talk covers the DNS protocol since 1986, its inherent security flaws, and how SecureDNS rebuilds it from the ground up.
Download PresentationTrue cross-platform and cross-architecture support. Deploy SecureDNS wherever you need it.
Modular, extensible, and maintainable — built with industry-standard design patterns and powered by the .NET ecosystem.
Use SecureDNS components individually in your own projects via NuGet.
Get started with SecureDNS in minutes. Download the latest release or explore the source code.
