blockname - A blockchain-backed DNS resolver
This is a simple bitcoin and telehash based DNS resolver, using the blockchain as a backup cache for normal DNS resolution as well as to resolve alternative domains and custom DHT-based TLDs (completely distributed, no registrars, root servers, or central authorities).
Simply publish your own hostname as a valid
OP_RETURN output on any transaction with the text format
*!host.name.com11223344 (valid lower case text hostname followed by a fixed 8-char hex IP address), these are called
hint transactions and the first byte is always the star character (
*). The hints can be registered with any bitcoin wallet software that can include an
OP_RETURN output on a transaction.
The blockname resolver is a traditional DNS cache and recursive resolver, it will attempt to resolve all queries via regular DNS first and only when they fail will it use any names that come from the blockchain-based hints. In this mode blockname will always act as a backup for any existing valid DNS names and only provides additional resolution for unregistered domains or unsupported TLDs.
In the background the resolver will continuously index all newly broadcast transactions that have a valid hints (any
OP_RETURN starting with a
*), storing only the unique hints that have the largest values associated with them. The value of the hint's own output (the "burned" value in satoshis) must be larger for the new hint to replace a previous one of the same name.
A custom TLD is formed by designated public blockname resolvers advertising their existence to each other and building a distributed hashtable (DHT) index for a TLD from those advertisements. The DHT index is then used to dynamically resolve any names with that TLD, allowing for ephemeral and alternative uses on a custom TLD that do not require a transaction per name or traditional DNS registration.
This project is at an early stage of development yet and actively evolving.
These commands are working but expect them to change:
git clone https://github.com/quartzjer/blockname.git cd blockname npm install
Start a local DNS resolver (defaults to port
Start a process to sync and monitor the transactions on the (testnet) blockchain:
Register your own hint on the blockchain, passing the hostname and an IP to resolve any
A queries, or a domain and IP:port of a nameserver that will resolve that whole domain. Uses a testnet faucet service by default currently, will generate a temporary address to send funds to (run command w/ no args to see options)
node bin/register.js "somename.tld" 184.108.40.206
Now do a test resolution to the local cache server, it will check normal DNS first, then fallback to any indexed hints from the blockchain:
dig somename.tld @127.0.0.1 -p 8053
After some more testing and docs, this will default to mainnet and become a
blocknamed DNS resolver service and
blockname registration command that anyone can
npm install -g blockname.
There will be a list of public blockname resolvers that can be used by anyone and a web-based registration tool and a chart of top hints in the blockchain.
Explore using types of secondary "confirmation" hints to enable self-forming distributed organizations a way to help reduce potential abuse of the simple value based priority?
A host hint is a direct mapping of an exact hostname to an IP address, an answer is returned immediately to any query with the given IP.
Any matching domain or TLD hints are authorative and checked first, hostname hints are only used when there is no other answer.
- Any OP_RETURN starting with
- followed by up to 30 valid domain name characters with any number of labels
- followed by a required 8 characters of the IPv4 address in hex
Domain hints are used to match one or more given queries to a name server IP and port. Any DNS query including or matching the suffix/domain will be forwarded to the hint's IP:port and any answers returned verbatim and cached.
A domain hint is only matched if there is no TLD answer.
- any OP_RETURN starting with
- followed by up to 26 valid domain name characters that must include two labels (name.tld)
- followed by a required 8 characters that are always the IPv4 address octets hex encoded, this address is used as the dns server to forward the query to
- followed by a required 4 characters that are the port of the DNS server in hex (network byte order uint16_t)
Name Authority Hints
work-in-progress, very rough draft
A Name Authority is broadcast in a TX:
- Any OP_RETURN starting with
- followed by the hostname of the NA
- followed by 8 hex characters, the new Notary ID
The NA then also Stamps this transaction, which must be published/verified out of band by the hostname (via TLS, DNS-SEC, or NA-chaining). Once the NA hint Stamp is verified, any subsequent Stamps are trusted from this NA.
A TLD hint will match any query with the given root label and send a query to the DHT for that label. The hints start with a
*# followed by the TLD label characters, then separated with a
. from one or more hex characters of the node's location in the DHT and its IP:port.
TLDs are always checked first after there is no traditional DNS answer, before checking for any domain or host hints. When creating a new blockname based TLD, care should be taken not to create conflicts with any existing or proposed names.
- DHT is the hex prefix of hashname at the IP:port
- by default include as much hex as possible, only designated would elect shorter
- TLD caretakers must monitor advertised hints for abuse
- DHT participating resolvers must be customized to mesh (know how to answer queries)
All blockname resolvers will process TLD hints and attempt to keep a connection open to at least eight of the shortest DHT prefix hints for each unique TLD. When any query comes in matching that TLD, the name will be hashed and sent to the closest two connected hashnames which will internally process/route the query and return an answer if any.
A resolver that is helping maintain a TLD must process all of its matching hints, attempting to keep connections open to a minimum number of peers in each bucket closest to its own hashname. The DHT is always seeded only by peers with valid hints, and each bucket is prioritzed by the value of the hints in that bucket.
Participating resolvers may have custom internal query processing and routing logic per TLD, these customizations can only be validated by other peers in that TLD ensuring that the highest priority hints are behaving correctly.
WIP, merging dotPublic into here
Well-known blockname TLDs
This TLD is dedicated to resolving hashnames for any telehash based service to associate itself publicly with a known stable network location. They should only be used for services that are intended to be public (web servers, etc), private devices should never be published in an anonymous DHT.
All hashname lookups are internally verified against the returned IP and port with a handshake to ensure authenticity before returning their information to any queries.
Any bitcoin address that is a public key (starts with
1) can be resolved and verified under the
While the base58 string encoding of a bitcoin address is regularly used and would be optimal for mapping to a special TLD, normal DNS is case-insensitive and some DNS tools may not support the case-sensitive base58 encoding. In practice most DNS resolution libraries will just pass the queried hostname verbatim through to the resolver/server and the address will be preserved, so using the base58check address often works when mapping from normal DNS. When possible, the address may be converted from base58 to base32 before sending to a blockname resolver via DNS.
TODO: decide/document on support for .onion, .bit, etc alternative TLDs, write a guide for creating a new custom TLD
Thanks to help from William Cotton.