Knot Resolver
The facts below are what the maker publishes about Knot Resolver, checked and dated. Our editors have not written about it yet.
Plans and prices
From Knot Resolver's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Open source | Free | completely free to download and use · GPL license |
| Professional support | Priced on request | SLA · NDA · tailored support and consultancy contracts |
The facts
Each one read from Knot Resolver's own pages, with the date it was checked.
What it does
- Architecture
- Its core architecture is tiny and efficient, with rich features implemented as optional modules to limit attack surface and improve performance.checked 1 Oct 2026
- DNSSEC
- DNSSEC validation is enabled by default and the resolver supports RFC 5011 automated trust-anchor updates and RFC 7646 negative trust anchors.checked 1 Oct 2026
- Docker limitation
- The documentation warns that running the container with a software-defined network such as Kubernetes will likely cause performance losses.checked 1 Oct 2026
- Encrypted DNS
- The documentation lists DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC among supported networking protocols.checked 1 Oct 2026
- Extensibility
- The modular architecture provides a state-machine-like API for extensions, and C and Lua modules can tap into the resolution process.checked 1 Oct 2026
- Installation
- Official installation guidance covers Debian/Ubuntu repositories, Fedora/RHEL derivatives/openSUSE packages, source releases, and an official Docker image.checked 1 Oct 2026
- Latest release
- The site lists Knot Resolver 6.5.0 as released on October 1, 2026.checked 1 Oct 2026
- Management
- The documentation provides an HTTP API and the kresctl utility for management.checked 1 Oct 2026
- Monitoring integrations
- Statistics can be exported to Graphite, InfluxDB, or Metronome, or exposed through a Prometheus metrics endpoint.checked 1 Oct 2026
- Performance
- The server uses a no-threading, shared-nothing architecture except for optionally shared cache, and instances can be reconfigured without downtime.checked 1 Oct 2026
- Purpose
- Knot Resolver is a caching DNS resolver scalable from huge resolver farms down to home network routers.checked 1 Oct 2026
- Security reporting
- Sensitive security issues can be reported using the listed contact address and associated PGP keyring.checked 1 Oct 2026
- Security testing
- The code is continuously checked by an extensive testing suite for stability, interoperability, performance regressions, and security-related problems.checked 1 Oct 2026
- Support
- Users can choose free support through public channels or professional support with SLA and NDA.checked 1 Oct 2026
The company
- Headquarters
- Prague, Czech Republicchecked 28 Sep 2026
Alternatives to Knot Resolver
- 1
AdGuard
AndroidiOSExtensionLinux6.9 - 2
Technitium DNS Server
Free planWebAPILinuxmacOS6.6Free plan - 3
dnsmasq
Free planAndroidLinuxmacOSSelf-hosted6.3Free plan - 4
Pi-hole
Free planWebAPILinuxSelf-hosted6.3Free plan - 5
PowerDNS Authoritative Server
APILinuxSelf-hosted6.3From $9,800 a year ($816.67 a month) - 6
Simple DNS Plus
APISelf-hostedWindows6.2$69 one-time