Simple * Authoritarian DNS Server * in Java

Question

Is there a Java server already written by Java that only performs authorized responses. I would like to take the source code and transfer it to the DNS server that we will be developing, which will use custom rule sets to decide which TTL to use and which IP address to publish.

The server will not be a caching server. It will only return authoritative results and will be published only in the WHOIS record for domains. It will never be called directly.

The server will have to publish MX records, A records, and SPF / TXT records. The plan is to use DNS to support load balancing between gateway servers in several places (we know that DNS has little coverage in this area). Also, it will stop publishing IP gateways of gateway servers when they come down (either intentionally or accidentally) (provided, DNS can only help during long outages).

We ourselves will write the logic for all this. But I would really like to start with a DNS server that went through a little testing instead of starting from scratch.

However, this is only possible if what we copy is simple enough. Otherwise, it may be a waste of time.

Answer 1

George,

I assume that you need a java library that implements the DNS protocol. Take a look at dnsjava

This is very good in terms of covering the full spectrum of all types of records and class.

But the problem you may encounter in a java based database is performance. DNS servers are expected to have high bandwidth. But yes, you can solve this by dropping more equipment.

If performance bothers you, I would suggest looking at unbound

Answer 2

http://www.xbill.org/dnsjava/

Unfortunately, the documentation states that "jnamed should not be used for production and probably should not be used for testing. If the above documentation is not enough, please do not ask anymore because it really should not be used."

However, I do not know any better alternatives.

Answer 3

You can take a look at Eagle DNS: http://www.unlogic.se/projects/eagledns

This has been for several years, and it has been pretty well tested to date.