Knot Resolver

knot-resolver.cz · checked 1 Oct 2026

#9 · DNS Server Software

Visit knot-resolver.cz ↗ Alternatives Knot Resolver vs YADIFA

How it plugs in

—Public API

NoOpen source

YesFree tier

Signal on DNS Server Software6.0#9 of 23

Knot Resolver is a caching DNS resolver scalable from huge resolver farms down to home network routers.

Pricing

Open sourcecompletely free to download and use · GPL licenseFree
Professional supportSLA · NDA · tailored support and consultancy contractsOn request

As knot-resolver.cz lists them, checked 1 Oct 2026.

Near it

All alternatives →

Runs on

Web
Windows
Mac
Linux
iOS
Android

Facts

Website: knot-resolver.cz
Price: Free tier
Free trial: Not stated
Architecture: Its core architecture is tiny and efficient, with rich features implemented as optional modules to limit attack surface and improve performance.
DNSSEC: DNSSEC validation is enabled by default and the resolver supports RFC 5011 automated trust-anchor updates and RFC 7646 negative trust anchors.
Docker limitation: The documentation warns that running the container with a software-defined network such as Kubernetes will likely cause performance losses.
Encrypted DNS: The documentation lists DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC among supported networking protocols.
Extensibility: The modular architecture provides a state-machine-like API for extensions, and C and Lua modules can tap into the resolution process.
Headquarters: Prague, Czech Republic
Installation: Official installation guidance covers Debian/Ubuntu repositories, Fedora/RHEL derivatives/openSUSE packages, source releases, and an official Docker image.
Latest release: The site lists Knot Resolver 6.5.0 as released on October 1, 2026.
Management: The documentation provides an HTTP API and the kresctl utility for management.
Monitoring integrations: Statistics can be exported to Graphite, InfluxDB, or Metronome, or exposed through a Prometheus metrics endpoint.
Performance: The server uses a no-threading, shared-nothing architecture except for optionally shared cache, and instances can be reconfigured without downtime.
Security reporting: Sensitive security issues can be reported using the listed contact address and associated PGP keyring.

On these boards

DNS Server Software#9 of 23

Built Knot Resolver?

Claim the page, then edit your card yourself from your member desk: its name, words, logo, screenshots, plans and links. Your desk shows how many readers open it.

Claim Knot Resolver