example-dns is a high-availability, multi-subnet authoritative DNS network powered by PowerDNS. Engineered with dual-cluster topology, automated AXFR zone replication, native DNSSEC, and strict registry compliance.
An open-source infrastructure initiative by ternis.org (powered by ternis.dev & ternis.net).
Our live nameserver infrastructure operates across physically isolated nodes and separate /24 subnets to ensure zero-point failure resilience.
Handles authoritative zone mastering, DNSSEC key management, and REST API provisioning with MariaDB backend storage.
| IPv4 | |
|---|---|
| IPv6 | |
| Subnet / Network | 77.90.60.0/24 (AS215365) |
| Engine & Backend | PowerDNS 4.9 / MariaDB 11.8 |
| Dual NS Alias | one.ns.ternis.net |
Autonomous fallback nameserver receiving NOTIFY triggers and synchronizing zones instantly via AXFR replication into SQLite3.
| IPv4 | |
|---|---|
| IPv6 | |
| Subnet / Network | 94.249.188.0/24 (AS215365) |
| Engine & Backend | PowerDNS 4.7 / SQLite3 |
| Dual NS Alias | two.ns.ternis.net |
Lightweight semantic web service, public API gateway, and Caddy on-demand certificate validation for authoritative domains.
| IPv4 | |
|---|---|
| IPv6 | |
| Web Server | Caddy v2.10 (Auto TLS) |
| Backend | PHP 8.5 Native Service |
| On-Demand TLS | Dynamic PowerDNS Ask Hook |
Delegate your apex domain to our nameserver cluster. Choose between the strict dual-nameserver set or the full redundant quad-nameserver configuration.
Ideal for all standard domains and required for registries with strict IP diversity rules (such as DENIC for .de domains).
example-dns.net
example-dns.orgFull four-nameserver declaration combining example-dns and ternis.net infrastructure for gTLDs (.com, .net, .org, .dev, .io).
example-dns.net
example-dns.org
one.ns.ternis.net
two.ns.ternis.net;; ANSWER SECTION:
example-dns.com. 3600 IN SOA example-dns.net. hostmaster.ternis.org. (
2026090901 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
604800 ; expire (1 week)
3600 ; minimum (1 hour)
)
example-dns.com. 3600 IN RRSIG SOA 13 2 3600 20260923000000 20260909000000 ...
example-dns.net. example-dns.org.
;; ANSWER SECTION:
example-dns.com. 3600 IN DNSKEY 256 3 13 (
ovpY.../3d8g==
) ; ZSK; alg = ECDSAP256SHA256 ; key id = 48201
example-dns.com. 3600 IN DNSKEY 257 3 13 (
sD7p...VqLg==
) ; KSK; alg = ECDSAP256SHA256 ; key id = 29314
Engineered from the ground up for absolute stability, low latency, cryptographic verification, and operational transparency.
Nameservers operate across distinct /24 IPv4 subnets (77.90.60.0/24 & 94.249.188.0/24) and independent IPv6 blocks on dedicated nodes.
Immediate zone sync across nodes using RFC 1996 DNS NOTIFY and RFC 5936 AXFR transfers with SQLite superslave provisioning.
Built-in cryptographic response validation safeguards against DNS cache poisoning, spoofing, and man-in-the-middle attacks.
Combines transactional MariaDB on Node 1 with lightweight, resilient SQLite3 on Node 2 for architectural fault tolerance.
Caddy proxy queries a local authorization hook ensuring certificates are issued only for domains authoritatively hosted in PowerDNS.
Completely open source under the MIT License with dual mirrors maintained across GitHub and Codeberg.
Deploy a full authoritative nameserver stack in seconds via Docker Compose or zero-touch VPS installer.
One-liner zero-touch installer for clean Debian and Ubuntu servers. Automatically resolves systemd-resolved port 53 collisions and configures PowerDNS.
curl -sSL https://raw.githubusercontent.com/example-dns/example-dns/master/infra/scripts/install-vps.sh | sudo bash -s -- --role allContainerized multi-container setup with auto-initializing SQLite database backend and REST API.
git clone https://github.com/example-dns/example-dns.git
cd example-dns/infra
docker compose up -d