Freedom251 › DNS Server Software
Knot Resolver

Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Open source | completely free to download and use · GPL license | Free |
| Professional support | SLA · NDA · tailored support and consultancy contracts | On request |
As knot-resolver.cz lists them, read 1 Oct 2026. The maker's own page has the final word.
Facts from Knot Resolver's own pages
- Architecture
- Its core architecture is tiny and efficient, with rich features implemented as optional modules to limit attack surface and improve performance. · knot-resolver.cz, 1 Oct 2026
- DNSSEC
- DNSSEC validation is enabled by default and the resolver supports RFC 5011 automated trust-anchor updates and RFC 7646 negative trust anchors. · knot-resolver.cz, 1 Oct 2026
- Docker limitation
- The documentation warns that running the container with a software-defined network such as Kubernetes will likely cause performance losses. · knot-resolver.cz, 1 Oct 2026
- Encrypted DNS
- The documentation lists DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC among supported networking protocols. · knot-resolver.cz, 1 Oct 2026
- Extensibility
- The modular architecture provides a state-machine-like API for extensions, and C and Lua modules can tap into the resolution process. · knot-resolver.cz, 1 Oct 2026
- Headquarters
- Prague, Czech Republic · knot-resolver.cz, 28 Sept 2026
- Installation
- Official installation guidance covers Debian/Ubuntu repositories, Fedora/RHEL derivatives/openSUSE packages, source releases, and an official Docker image. · knot-resolver.cz, 1 Oct 2026
- Latest release
- The site lists Knot Resolver 6.5.0 as released on October 1, 2026. · knot-resolver.cz, 1 Oct 2026
- Management
- The documentation provides an HTTP API and the kresctl utility for management. · knot-resolver.cz, 1 Oct 2026
- Monitoring integrations
- Statistics can be exported to Graphite, InfluxDB, or Metronome, or exposed through a Prometheus metrics endpoint. · knot-resolver.cz, 1 Oct 2026
- Performance
- The server uses a no-threading, shared-nothing architecture except for optionally shared cache, and instances can be reconfigured without downtime. · knot-resolver.cz, 1 Oct 2026
- Purpose
- Knot Resolver is a caching DNS resolver scalable from huge resolver farms down to home network routers. · knot-resolver.cz, 1 Oct 2026
- Security reporting
- Sensitive security issues can be reported using the listed contact address and associated PGP keyring. · knot-resolver.cz, 1 Oct 2026
- Security testing
- The code is continuously checked by an extensive testing suite for stability, interoperability, performance regressions, and security-related problems. · knot-resolver.cz, 1 Oct 2026
- Support
- Users can choose free support through public channels or professional support with SLA and NDA. · knot-resolver.cz, 1 Oct 2026
Where Knot Resolver stands on Freedom251
- DNS Server Software#9 of 23