A toolbox of links for day-to-day core network services work: checks, diagnostics, references, and security tooling.
This repository is a curated list of external resources commonly used when working with DNS, DHCP, DNSSEC, email, and IPv6.
DHCP Foundations and Operations
DHCP Parameters (IANA)
Authoritative registry of DHCP and BOOTP option codes maintained by IANA.
DHCP Parameters (IANA)
Kea Documentation
Official documentation for ISC Kea DHCP, covering configuration, HA, hooks, and APIs.
Kea Documentation
Kea Migration Assistant (KeaMA)
ISC tool to migrate configurations from ISC DHCP to Kea DHCP.
Kea Management Assistant (KeaMA)
DNS References and Tooling
Acronyms and Terms
Glossary of ICANN-related terminology and abbreviations.
ICANN Acronyms and Terms
BIND 9 Administrator Reference
Official administration and configuration guide for BIND 9.
BIND 9 Administrator Reference
Daily Added gTLD Domains
Daily data on newly added generic top-level domains.
Daily Added gTLD Domains
DNS Abuse Techniques Matrix
Overview of DNS abuse techniques and mitigation approaches.
DNS Abuse Techniques Matrix
DNS Privacy Public Resolvers
List of public DNS resolvers supporting encrypted DNS.
DNS Privacy Public Resolvers
DNS Resolver Guide
Interactive guide for choosing a public DNS resolver based on privacy, filtering, DNSSEC, IPv6, encrypted DNS transports, jurisdiction, logging, ECS behavior, and latency.
DNS Resolver Guide
DNS-related RFCs
Informal list of RFCs that relate to the DNS.
DNS-related RFCs
DNS RFC Index
Index of DNS-related RFCs for quick lookup.
DNS RFC Index
DNS Stamp Calculator
Tool for generating DNS stamp strings for encrypted DNS resolvers.
DNS Stamp Calculator
DNS Toys
Collection of interactive DNS tools and visualizations.
DNS Toys
DNS Zone Stats
Statistics on top-level domain zone sizes and growth.
DNS Zone Stats
DNS over HTTPS Wiki (curl)
Technical documentation on DNS over HTTPS support in curl.
DNS over HTTPS Wiki (curl)
Encrypted DNS Overview
Explanation of encrypted DNS mechanisms and operational implications.
Encrypted DNS Overview
Google Ngram Viewer
Search tool for word and phrase usage trends in digitized books.
Google Ngram Viewer
ioc2rpz
Converts threat intelligence indicators into DNS RPZ format.
ioc2rpz
ISC DNS Tools
Collection of DNS-related tools provided by ISC.
ISC DNS Tools
Public DNS Resolver Directory
Directory of public DNS resolvers worldwide.
Public DNS Resolver Directory
Reverse DNS Map
Visualization of reverse DNS delegation data.
Reverse DNS Map
State of DNSSEC
Annual report on DNSSEC adoption, based on large-scale domain analysis and breakdowns by geography and registrars.
State of DNSSEC
Zytrax DNS Book
Vendor-neutral, in-depth reference on DNS concepts and operation.
Zytrax DNS Book
DNS Testing and Diagnostics
APNIC Labs Measurements
Global measurements covering DNS, IPv6, and DNSSEC behavior.
APNIC Labs Measurements
Check My DNS
Web-based DNS testing and diagnostics service operated by DNS-OARC .
Check My DNS
Check Open Resolver
Tests whether a DNS server is configured as an open resolver.
Check Open Resolver
Cloudflare Radar
Internet-wide visibility into traffic, DNS, and protocol trends.
Cloudflare Radar
Domain Rankings
Domain popularity rankings based on Cloudflare data.
Domain Rankings
dig GUI
Web-based graphical interface for DNS queries.
dig GUI
DNS Checker
Checks DNS propagation from multiple locations worldwide.
DNS Checker
DNS Leak Test
Checks whether your DNS queries are leaking to unintended resolvers.
DNS Leak Test
What Is My DNS Server?
Checks which DNS servers your device is actually using and shows the server owner and country.
What Is My DNS Server?
DNS Dumpster
DNS reconnaissance and infrastructure discovery tool.
DNS Dumpster
DNSDiag
DNS measurement, troubleshooting, and security auditing toolset (dnsping, dnstraceroute, dnseval).
DNSDiag
DNS Inspect
DNS configuration inspection and analysis tool.
DNS Inspect
DNS Scanner
Comprehensive DNS server health, protocol compliance, DNSSEC, encrypted transport, and security assessment tool.
DNS Scanner
DNS Speed Test
Compares performance of DNS resolvers.
DNS Speed Test
DNS Spy
DNS exposure and configuration scanning tool.
DNS Spy
DNSAudit.io
DNS configuration and security assessment tool.
DNSAudit.io
getdns Query Tool
Web interface for DNS queries using the getdns API.
getdns Query Tool
Global DNS Testing Tool
Checks DNS resolution from multiple geographic locations.
Global DNS Testing Tool
Interactive DNS Resolution
Educational visualization of the DNS resolution process.
Interactive DNS Resolution
intoDNS
DNS health and delegation checker.
intoDNS
Have I Been Squatted?
Checks for potential domain squatting risks.
Have I Been Squatted?
Transitive Trust
Visualizes DNS dependency and trust relationships.
Transitive Trust
ViewDNS
Collection of DNS and IP lookup tools.
ViewDNS
Zonemaster
DNS delegation and standards compliance testing tool.
Zonemaster
DNSSEC Validation and Visibility
DNSSEC Analyzer
Analyzes DNSSEC trust chains and validation behavior.
DNSSEC Analyzer
DNSSEC Deployment Maps
Global DNSSEC deployment maps and TLD deployment status.
DNSSEC Deployment Maps
DNSSEC Deployment Report
DNSSEC deployment statistics by TLD (signed domains, coverage, and related deployment data).
DNSSEC Deployment Report
DNSSEC Deployment Statistics
Results of continuous DNS scanning to measure DNSSEC and DANE growth over time, with trend graphs and per-TLD views.
DNSSEC Deployment Statistics
DNSSEC Resolver Test
Tests DNSSEC validation behavior of resolvers.
DNSSEC Resolver Test
DNSSEC World Map
Visualizes global DNSSEC deployment and validation rates.
DNSSEC World Map
DNSSEC or Not
Simple DNSSEC validation check for domains.
DNSSEC or Not
DNSViz
Advanced DNS and DNSSEC visualization and analysis platform.
DNSViz
EDNS Compliance Tester
Tests authoritative servers for EDNS behavior and compliance.
EDNS Compliance Tester
ICANN ITHI Metric M11
ICANN ITHI metric tracking DNSSEC deployment in TLDs and SLDs, including DNSSEC algorithm usage breakdown.
ICANN ITHI Metric M11
Email Authentication and Hygiene
DMARC Assistant
Guided creation and validation of DMARC records.
DMARC Assistant
DMARC Record Checker
Validates existing DMARC records.
DMARC Record Checker
MXToolbox Domain Health Check
Aggregated checks for MX, SPF, DKIM, DMARC, and reputation.
MXToolbox Domain Health Check
Mailhardener Tools
Email authentication and reporting analysis tools.
Mailhardener Tools
Sendmarc Domain Score
Evaluates email domain security posture.
Sendmarc Domain Score
IPv6 Adoption and Tooling
Cisco IPv6 Lab
IPv6 testing and validation platform.
Cisco IPv6 Lab
Google IPv6 Statistics
Country-level IPv6 adoption statistics.
Google IPv6 Statistics
IPv6 Army
Advocacy and information site for IPv6 deployment.
IPv6 Army
IPv6 Compatibility Checker
Tests client IPv6 connectivity and capability.
IPv6 Compatibility Checker
IPv6 GUA Utilization
Statistics on IPv6 address utilization.
IPv6 GUA Utilization
IPv6 Tools
Collection of IPv6-related tools and resources.
IPv6 Tools
General Network and Security Utilities
ATT&CK Navigator
Visualization tool for the MITRE ATT&CK framework.
ATT&CK Navigator
CyberChef
Data analysis and decoding tool.
CyberChef
DNS Profile Generator
Generates Apple configuration profiles (.mobileconfig) to enable encrypted DNS
DNS Profile Generator
Down for Everyone or Just Me
Checks website availability from multiple locations.
Down for Everyone or Just Me
Fast Good Cheap
Illustrates the classic project management trade-off triangle.
Fast Good Cheap
Hardenize
Automated security assessment of domains and services.
Hardenize
Hex Tools
Online hexadecimal conversion and analysis tools.
Hex Tools
IP Reputation
IP address reputation lookup.
IP Reputation
Locate My IP
Shows IP-based geolocation information.
Locate My IP
MAC Address Lookup
Looks up vendor information for MAC addresses.
MAC Address Lookup
SSL Server Test
Analyzes TLS configuration of servers.
SSL Server Test
TCP/IP Guide
Reference documentation on TCP/IP networking.
TCP/IP Guide
Test Internet Standards
Tests compliance with modern Internet standards.
Test Internet Standards
URLVoid
Website reputation and blacklist check.
URLVoid
VirusTotal
Multi-engine analysis for domains, URLs, and files.
VirusTotal
Wireshark Display Filters
Reference for Wireshark display filter syntax.
Wireshark Display Filters