Repository navigation
Releases
v0.2.0
PanoptiDNS synthesizes IPv6 reverse (PTR) and matching forward (AAAA)
records per query, so no zone file is needed for a /64. It is a Rust
reimplementation of AllKnowingDNS
v1.7 and reads the same configuration file.
Container image
docker pull ghcr.io/cygnusnetworks/panoptidns:0.2.0
docker pull cygnusnetworks/panoptidns:0.2.0Also tagged stable and latest (both track the newest release and
never point at a prerelease), and {{major}}.{{minor}} for the
minor series. Pin the exact version in production.
Multi-arch (amd64/arm64), ~5 MB, distroless, runs as uid 65532, with
build provenance attestation.
Static binaries
Fully static musl builds for x86_64 and aarch64, with .sha256
checksums. Each archive also contains the example config, the systemd
unit and the docs.
Security
Six defects found in AllKnowingDNS v1.7 are structurally absent here
rather than patched, each with a named regression test. Most
seriously, the original could be terminated by a single
unauthenticated UDP packet, because it built resource records by
interpolating the query name into a DNS master-file presentation
string.
See SECURITY.md.
Upgrading from AllKnowingDNS
Run panoptidns --check-config -c /etc/all-knowing-dns.conf first.
Malformed network lines, unknown directives and a missing
%DIGITS% are now fatal rather than silently ignored. Every
behavioural difference is listed in the
migration guide.
Full changelog: CHANGELOG.md
Full Changelog: v0.1.0...v0.2.0
v0.1.0
PanoptiDNS synthesizes IPv6 reverse (PTR) and matching forward (AAAA)
records per query, so no zone file is needed for a /64. It is a Rust
reimplementation of AllKnowingDNS
v1.7 and reads the same configuration file.
Container image
docker pull ghcr.io/cygnusnetworks/panoptidns:0.1.0
docker pull cygnusnetworks/panoptidns:0.1.0Also tagged stable and latest (both track the newest release and
never point at a prerelease), and {{major}}.{{minor}} for the
minor series. Pin the exact version in production.
Multi-arch (amd64/arm64), ~5 MB, distroless, runs as uid 65532, with
build provenance attestation.
Static binaries
Fully static musl builds for x86_64 and aarch64, with .sha256
checksums. Each archive also contains the example config, the systemd
unit and the docs.
Security
Six defects found in AllKnowingDNS v1.7 are structurally absent here
rather than patched, each with a named regression test. Most
seriously, the original could be terminated by a single
unauthenticated UDP packet, because it built resource records by
interpolating the query name into a DNS master-file presentation
string.
See SECURITY.md.
Upgrading from AllKnowingDNS
Run panoptidns --check-config -c /etc/all-knowing-dns.conf first.
Malformed network lines, unknown directives and a missing
%DIGITS% are now fatal rather than silently ignored. Every
behavioural difference is listed in the
migration guide.
Full changelog: CHANGELOG.md
Full Changelog: https://github.com/CygnusNetworks/PanoptiDNS/commits/v0.1.0