dns-dhcp-toolbox

A toolbox of links for day-to-day core network services work: checks, diagnostics, references, and security tooling.

This repository is a curated list of external resources commonly used when working with DNS, DHCP, DNSSEC, email, and IPv6.

---

DHCP Foundations and Operations

DHCP Parameters (IANA)

Authoritative registry of DHCP and BOOTP option codes maintained by IANA.

DHCP Parameters (IANA)

Kea Documentation

Official documentation for ISC Kea DHCP, covering configuration, HA, hooks, and APIs.

Kea Documentation

Kea Migration Assistant (KeaMA)

ISC tool to migrate configurations from ISC DHCP to Kea DHCP.

Kea Management Assistant (KeaMA)

---

DNS References and Tooling

ICANN Acronyms and Terms

Glossary of ICANN-related terminology and abbreviations.

ICANN Acronyms and Terms

BIND 9 Administrator Reference

Official administration and configuration guide for BIND 9.

BIND 9 Administrator Reference

Daily Added gTLD Domains

Daily data on newly added generic top-level domains.

Daily Added gTLD Domains

DNS Abuse Techniques Matrix

Overview of DNS abuse techniques and mitigation approaches.

DNS Abuse Techniques Matrix

DNS Privacy Public Resolvers

List of public DNS resolvers supporting encrypted DNS.

DNS Privacy Public Resolvers

DNS RFC Index

Index of DNS-related RFCs for quick lookup.

DNS RFC Index

DNS Stamp Calculator

Tool for generating DNS stamp strings for encrypted DNS resolvers.

DNS Stamp Calculator

DNS Toys

Collection of interactive DNS tools and visualizations.

DNS Toys

DNS Zone Stats

Statistics on top-level domain zone sizes and growth.

DNS Zone Stats

DNS over HTTPS Wiki (curl)

Technical documentation on DNS over HTTPS support in curl.

DNS over HTTPS Wiki (curl)

Encrypted DNS Overview

Explanation of encrypted DNS mechanisms and operational implications.

Encrypted DNS Overview

Google Ngram Viewer

Search tool for word and phrase usage trends in digitized books.

Google Ngram Viewer

ioc2rpz

Converts threat intelligence indicators into DNS RPZ format.

ioc2rpz

ISC DNS Tools

Collection of DNS-related tools provided by ISC.

ISC DNS Tools

Public DNS Resolver Directory

Directory of public DNS resolvers worldwide.

Public DNS Resolver Directory

Reverse DNS Map

Visualization of reverse DNS delegation data.

Reverse DNS Map

State of DNSSEC

Annual report on DNSSEC adoption, based on large-scale domain analysis and breakdowns by geography and registrars.

State of DNSSEC

Zytrax DNS Book

Vendor-neutral, in-depth reference on DNS concepts and operation.

Zytrax DNS Book

---

DNS Testing and Diagnostics

APNIC Labs Measurements

Global measurements covering DNS, IPv6, and DNSSEC behavior.

APNIC Labs Measurements

Check My DNS

Web-based DNS testing and diagnostics service operated by DNS-OARC.

Check My DNS

Check Open Resolver

Tests whether a DNS server is configured as an open resolver.

Check Open Resolver

Cloudflare Radar

Internet-wide visibility into traffic, DNS, and protocol trends.

Cloudflare Radar

Domain Rankings

Domain popularity rankings based on Cloudflare data.

Domain Rankings

dig GUI

Web-based graphical interface for DNS queries.

dig GUI

DNS Checker

Checks DNS propagation from multiple locations worldwide.

DNS Checker

DNS Dumpster

DNS reconnaissance and infrastructure discovery tool.

DNS Dumpster

DNSDiag

DNS measurement, troubleshooting, and security auditing toolset (dnsping, dnstraceroute, dnseval).

DNSDiag

DNS Inspect

DNS configuration inspection and analysis tool.

DNS Inspect

DNS Speed Test

Compares performance of DNS resolvers.

DNS Speed Test

DNS Spy

DNS exposure and configuration scanning tool.

DNS Spy

DNSAudit.io

DNS configuration and security assessment tool.

DNSAudit.io

getdns Query Tool

Web interface for DNS queries using the getdns API.

getdns Query Tool

Global DNS Testing Tool

Checks DNS resolution from multiple geographic locations.

Global DNS Testing Tool

Interactive DNS Resolution

Educational visualization of the DNS resolution process.

Interactive DNS Resolution

intoDNS

DNS health and delegation checker.

intoDNS

Have I Been Squatted?

Checks for potential domain squatting risks.

Have I Been Squatted?

Transitive Trust

Visualizes DNS dependency and trust relationships.

Transitive Trust

ViewDNS

Collection of DNS and IP lookup tools.

ViewDNS

Zonemaster

DNS delegation and standards compliance testing tool.

Zonemaster

---

DNSSEC Validation and Visibility

DNSSEC Analyzer

Analyzes DNSSEC trust chains and validation behavior.

DNSSEC Analyzer

DNSSEC Deployment Report

DNSSEC deployment statistics by TLD (signed domains, coverage, and related deployment data).

DNSSEC Deployment Report

DNSSEC Deployment Statistics

Results of continuous DNS scanning to measure DNSSEC and DANE growth over time, with trend graphs and per-TLD views.

DNSSEC Deployment Statistics

DNSSEC Resolver Test

Tests DNSSEC validation behavior of resolvers.

DNSSEC Resolver Test

DNSSEC World Map

Visualizes global DNSSEC deployment and validation rates.

DNSSEC World Map

DNSSEC or Not

Simple DNSSEC validation check for domains.

DNSSEC or Not

DNSViz

Advanced DNS and DNSSEC visualization and analysis platform.

DNSViz

EDNS Compliance Tester

Tests authoritative servers for EDNS behavior and compliance.

EDNS Compliance Tester

ICANN ITHI Metric M11

ICANN ITHI metric tracking DNSSEC deployment in TLDs and SLDs, including DNSSEC algorithm usage breakdown.

ICANN ITHI Metric M11

---

Email Authentication and Hygiene

DMARC Assistant

Guided creation and validation of DMARC records.

DMARC Assistant

DMARC Record Checker

Validates existing DMARC records.

DMARC Record Checker

MXToolbox Domain Health Check

Aggregated checks for MX, SPF, DKIM, DMARC, and reputation.

MXToolbox Domain Health Check

Mailhardener Tools

Email authentication and reporting analysis tools.

Mailhardener Tools

Sendmarc Domain Score

Evaluates email domain security posture.

Sendmarc Domain Score

---

IPv6 Adoption and Tooling

Cisco IPv6 Lab

IPv6 testing and validation platform.

Cisco IPv6 Lab

Google IPv6 Statistics

Country-level IPv6 adoption statistics.

Google IPv6 Statistics

IPv6 Army

Advocacy and information site for IPv6 deployment.

IPv6 Army

IPv6 Compatibility Checker

Tests client IPv6 connectivity and capability.

IPv6 Compatibility Checker

IPv6 GUA Utilization

Statistics on IPv6 address utilization.

IPv6 GUA Utilization

IPv6 Tools

Collection of IPv6-related tools and resources.

IPv6 Tools

---

General Network and Security Utilities

ATT&CK Navigator

Visualization tool for the MITRE ATT&CK framework.

ATT&CK Navigator

CyberChef

Data analysis and decoding tool.

CyberChef

DNS Profile Generator

Generates Apple configuration profiles (.mobileconfig) to enable encrypted DNS

DNS Profile Generator

Down for Everyone or Just Me

Checks website availability from multiple locations.

Down for Everyone or Just Me

Fast Good Cheap

Illustrates the classic project management trade-off triangle.

Fast Good Cheap

Hardenize

Automated security assessment of domains and services.

Hardenize

Hex Tools

Online hexadecimal conversion and analysis tools.

Hex Tools

IP Reputation

IP address reputation lookup.

IP Reputation

Locate My IP

Shows IP-based geolocation information.

Locate My IP

MAC Address Lookup

Looks up vendor information for MAC addresses.

MAC Address Lookup

SSL Server Test

Analyzes TLS configuration of servers.

SSL Server Test

TCP/IP Guide

Reference documentation on TCP/IP networking.

TCP/IP Guide

Test Internet Standards

Tests compliance with modern Internet standards.

Test Internet Standards

URLVoid

Website reputation and blacklist check.

URLVoid

VirusTotal

Multi-engine analysis for domains, URLs, and files.

VirusTotal

Wireshark Display Filters

Reference for Wireshark display filter syntax.

Wireshark Display Filters

---