Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot.
It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls.
The DNS subsystem provides a local DNS server for the network, with forwarding of all query types to upstream recursive DNS servers and caching of common record types (A, AAAA, CNAME and PTR, also DNSKEY and DS when DNSSEC is enabled).
This is free and open source software.
Key Features
- Local DNS names can be defined by reading /etc/hosts, by importing names from the DHCP subsystem, or by configuration of a wide range of useful record types.
- Upstream servers can be configured in a variety of convenient ways, including dynamic configuration as these change on moving upstream network.
- Authoritative DNS mode allows local DNS names may be exported to zone in the global DNS. Dnsmasq acts as authoritative server for this zone, and also provides zone transfer to secondaries for the zone, if required.
- DNSSEC validation may be performed on DNS replies from upstream nameservers, providing security against spoofing and cache poisoning.
- Specified sub-domains can be directed to their own upstream DNS servers, making VPN configuration easy.
- Internationalised domain names are supported.
Website: thekelleys.org.uk/dnsmasq
Support:
Developer: Simon Kelley
License: GNU General Public License v2.0 or 3.0
Dnsmasq is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| DNS Servers | |
|---|---|
| CoreDNS | DNS server that chains plugins |
| BIND | Flexible, full-featured DNS system |
| PowerDNS | Authoritative server, the Recursor, and Dnsdist |
| NSD | NLnet Labs Name Server Daemon |
| Technitium | Self host a DNS server for privacy and security |
| SmartDNS | Local DNS server that accepts DNS query requests from local clients |
| Unbound | Validating, recursive, caching DNS resolver |
| Hickory | Rust-based DNS client, server and resolver |
| YADIFA | Lightweight authoritative Name Server with DNSSEC capabilities |
| Knot DNS | High-performance authoritative-only DNS server |
| gdnsd | Authoritative-only DNS server |
| Dnsmasq | Network infrastructure: DNS, DHCP, router advertisement and network boot |
| acme-dns | Simplified DNS server with a RESTful HTTP API |
| encrypted-dns | Modern encrypted DNS server |
| MaraDNS | Small DNS server |
| aardvark-dns | Authoritative DNS server for A/AAAA container records |
| FDNS | Encrypted DNS proxy designed for small networks and Linux desktops |
| tinydns | Tiny DNS server with simple JSON config |
| pkdns | DNS server resolving pkarr self-sovereign domains |
| dprox | Lightweight DNS proxy server |
| PopuraDNS | Simple DNS server with decentralized domain names support |
| pdnsd | DNS server designed for local caching of DNS information |
| dnrs | DNS server written in rust |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |