egon1024/dnsconduit repository overview

⁠DNS Conduit

DNS Conduit is a DNS forwarding and observability platform. It sits in the query path between clients and upstream resolvers: listen, apply policy, forward to configured pools/backends, and return the answer — with metrics, logs, traces, and optional dnstap export off the hot path.

Conduit is a forwarder, not an authoritative nameserver and not a recursive resolver. You configure upstream destinations; Conduit does not host zones or walk the public DNS tree on its own.

⁠What you get

• UDP/TCP DNS ingress and upstream forwarding
• Declarative policy and optional Rhai scripts on request/response hooks
• Pool load balancing, retries, failover, and optional backend health
• Optional in-memory DNS answer cache
• Prometheus scrape and optional OTLP metrics, tracing, structured logging, and dnstap event export
• Hot config reload (SIGHUP); optional control plane (conduitctl / gRPC)

⁠Quick start

Mount a config file and publish DNS ports:

VERSION=1.0.0   # pin a release; avoid relying on latest in production
docker pull egon1024/dnsconduit:${VERSION}

docker run --rm -p 53:53/udp -p 53:53/tcp \
  -v "$PWD/conduit.yaml:/etc/conduit/conduit.yaml:ro" \
  egon1024/dnsconduit:${VERSION}

The image entrypoint is conduit; the default config path is /etc/conduit/conduit.yaml.

The same image is also published to GHCR (ghcr.io/egon1024/dnsconduit) with identical contents and digest. Prefer pinning an explicit version tag or digest for production.

⁠Documentation

Operator docs (install, configure, operate, troubleshoot):

https://egon1024.github.io/DNSConduit/⁠

Start with What Conduit is for⁠ and Install and run⁠.

⁠Source and license

• Source: https://github.com/egon1024/DNSConduit⁠
• License: Apache License 2.0