example-dns (ternis.net)
The example-dns infrastructure forms the authoritative DNS core for ternis.org, ternis.net, and associated ecosystem domains. Utilizing dual redundant nodes in Frankfurt and Nuremberg, the cluster publishes cryptographically signed DNSSEC zones with 100% zero query logging.
Key Features & Capabilities
- Dual-node Anycast resilience: one.ns.ternis.net (Frankfurt) and two.ns.ternis.net (Nuremberg)
- Automated DNSSEC zone signing using modern ECDSA Curve P-256 (Algorithm 13)
- Multi-daemon redundancy (BIND 9, Knot DNS, and NSD) preventing vendor-specific parser exploits
- GitOps zone management: all changes linted and verified in CI pipelines before deployment
- Strict zero-telemetry policy: all resolver queries piped directly to /dev/null
Technical Specifications
DNS Verification Query
dig @one.ns.ternis.net ternis.org +dnssec +noall +answer
host -t NS ternis.org one.ns.ternis.netRelated Technical Wiki Documentation
In-depth implementation tutorials covering the technologies used by this service.
Complete beginner guide to running authoritative nameservers, Primary-Secondary replication, AXFR zone transfers, TSIG security, and the example-dns architecture.
Complete beginner guide to DNS zone delegation, in-bailiwick nameservers, glue records, avoiding lame delegations, and CLI verification tools.
Complete beginner guide to DNSSEC, preventing DNS spoofing and cache poisoning, understanding DS, DNSKEY, and RRSIG records, and verifying with dig.
Other Projects in the Ecosystem
View all →Privacy-first online REST client to test endpoints, craft headers, inspect payload responses, and debug webhooks with zero telemetry or tracking.
MTEX.devModular developer toolsets, lightweight UI components, and software libraries empowering ecosystem applications.
getmy.nameLightweight headless REST API to query and render developer profiles, public keys, and project portfolios in clean JSON.