A DNS server optimized for ISPs
Designed with ISPs in mind
More than any other industry, ISPs' business depends on a rock solid DNS infrastructure. That's where InkBridgeDNS comes in. By leveraging the multi-threaded design of our platform, it is specifically optimized for high-performance IP address lookups.
Works with your existing data store
Many DNS products require that customers use their database schema, rather than working with your existing system. This limitations means increased costs, to adapt your business processes to their requirements. At InkBridge, we think you have better ways to spend your IT budget. No matter what database and schema you use, we can integrate with it.
Flexible policy framework
Business policies can be expressed in our high performance policy language. This language allows administrators to precisely define and enforce fine grained access-control policies. Don’t want to learn a new scripting language? No problem. We also provide an interpreter for your favourite scripting language (python, lua, ruby, perl etc.)
Seamless integration with RADIUS and DHCP servers
InkBridgeDNS is part of our Protocol Suite platform, and is fully integrated with our RADIUS, DHCP, and TACACS+ products. We know that DNS performance is critical for ISPs. Our integrated approach means that all of the services work together to provide a unified way to view and manage your network.
Who We’ve Helped
DNS features
We support the common DNS resource records:
- A records
- AAAA
- TXT
- CNAME
- MX
- etc.
Some features are not supported:
- Dynamic DNS updates
- DNS over TLS
- DNS over HTTPS
Databases
InkBridgeDNS is completely database agnostic. If you already have a database infrastructure, we can work with it, including:
- MySQL
- Active Directory
- Open LDAP
- PostgreSQL
- Redis
- Oracle
- Microsoft SQL Server
- MongoDB
- IBM DB2
Designed for ISPs
InkBridgeDNS focuses on being the best DNS server for ISPs.
- Can handle millions of records
- Standardized schema, or use your custom schema
- Provides a REST API for updates
- Integrates with InkBridgeRADIUS, InkBridgeDHCP (DHCPv4 and DHPv6)
- Allows for unified network management, while providing protocol-specific views of the data
Unlimited split horizons
Most DNS servers allow for only two horizons: public facing, and private. InkBridgeDNS leverages our unique virtual server capability to enable unlimited split horizons. Our unparalleled flexibility makes it easier to implement the complex policies that ISPs demand.
Uniquely focused on ISPs
Our ISP customers need fast, reliable, DNS that just works, without the bloat of unnecessary features. Our DNS server doesn't implement capabilities such as Dynamic DNS updates or delegated administration simply because our ISP customers don't need them. By staying laser focused on our customer requirements, we are able to provide high performance, small footprint, streamlined tools that do precisely the job they need to do.
Adaptable to new resource records
We understand that system administrators need to be able to adapt to changing needs, with minimal disruption to the existing technology stack. While InkBridgeDNS supports many of the defined DNS resource records, it doesn't implement all of them. However, adding a new resource record in our platform is a simple matter of defining it through InkBridgePolicy, our powerful policy engine. New resource records can be added without a wholesale upgrade of the entire server, enabling us to provide flexibility, without sacrificing stability.
InkBridgeDNS supports the following IETF standards
- RFC-1034 Domain names: Concepts and facilities
- RFC-1101 DNS encoding of network names and other types
- RFC-1183 New DNS RR Definitions
- RFC-2915 The Naming Authority Pointer (NAPTR) DNS Resource Record
- RFC-2930 Secret Key Establishment for DNS (TKEY RR)
- RFC-3492 Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
- RFC-3597 Handling of Unknown DNS Resource Record (RR) Types
- RFC-4033 DNS Security Introduction and Requirements
- RFC-4398 Storing Certificates in the Domain Name System (DNS)
- RFC-4408 Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1
- RFC-4501 Domain Name System Uniform Resource Identifiers
- RFC-8375 Special-Use Domain 'home.arpa.'
- RFC-8467 Padding Policies for Extension Mechanisms for DNS (EDNS(0))
Get InkBridgeDNS
Find out how InkBridgeDNS can be deployed into your ecosystem.
Focus on your business, not your network
Check out our full suite of foundational protocol products for RADIUS, DHCP, TACACS+, and DNS. Our products, coupled with world class professional services and support, ensures that your network is always fast, secure, and resilient.