Home
A lightweight, high-performance tool that captures DNS queries and responses from your DNS servers, processes them, and outputs clean data to your monitoring and analytics systems.
Why DNS-collector?
Process at the Edge
Clean, filter, and enrich DNS data before storage—not after. Minimize bandwidth, disk usage, and storage costs downstream.
DNS-Native Processing
Natively parses and understands DNS protocols, EDNS extensions, and query types. Designed by and for DNS administrators.
Flexible Collectors & Loggers
Ingest from DNStap, Live PCAP, BIND, PowerDNS, or Unbound. Send outputs to syslog, Fluentd, Kafka, Elasticsearch, Prometheus, Clickhouse, and more.
Rich Transformations
Perform user privacy masking, GeoIP enriches, traffic prediction, suspicious activity detection, filtering, and custom metadata injection.
Multiple Formats
Natively support plain text, JSON lines, PCAP format, Jinja2 templating, and binary streams to fit any workflow.
Production Ready
Built in Go for ultimate speed, efficiency, and low memory footprints. Extensively field-tested in high-throughput environments.
Where to Start?
Installation
Download precompiled binaries, run Docker containers, or build from source.
Configuration
Complete documentation for configuration options and parameters.
Workers Setup
Learn how to connect inputs (collectors) to outputs (loggers).
Transformers
Add filters, privacy masking, and threat intelligence enrichments.
More DNS tools?
CoreDNS-GSLB
An open-source Global Server Load Balancing (GSLB) plugin for CoreDNS, providing traffic routing for VMs and hybrid environments.
DNS-tester
A comprehensive DNS testing and verification toolkit designed to validate DNS response behavior and performance under various network conditions.