DNS Consulting

Zwiegnet provides comprehensive DNS expertise using BIND — the de-facto standard for authoritative and recursive DNS on Linux and Unix platforms. We design and implement robust DNS infrastructures for public-facing domains, private internal networks, and complex multi-site organizations.

Our DNS services include:

• Public Authoritative DNS – Zone setup, delegation from registrars, anycast considerations, and secondary/slave configurations for redundancy.
• Private/Internal DNS – Split-horizon views, internal-only zones, forwarders, and integration with Active Directory or LDAP.
• Dynamic DNS (DDNS) – Secure dynamic updates (nsupdate with TSIG/GSS-TSIG keys), integration with DHCP servers, and automated host registration.
• Multi-Site & Replication – Zone transfers (AXFR/IXFR), multi-master setups, hidden primaries, and geo-aware DNS responses.
• Security Hardening – DNSSEC signing/validation, response rate limiting (RRL), TSIG keys, ACLs, and protection against cache poisoning/amplification attacks.
• High Availability – Load-balanced resolvers, anycast routing, failover secondaries, and monitoring for zone consistency.
• Recursive Resolver Setup – Caching resolvers, forward-only configurations, RPZ (response policy zones) for blocking, and DoT/DoH support.
• Performance Tuning – Query optimization, cache sizing, EDNS, and handling high query volumes.
• Migration & Integration – Migration from Windows DNS, PowerDNS, or other systems; integration with cloud DNS (Route 53, Cloudflare).
• Troubleshooting & Auditing – Diagnosis of resolution failures, lame delegations, NXDOMAIN issues, and full DNS health checks (dig, dnsviz).

Reliable DNS is critical for network availability and security — we ensure your public and private DNS infrastructure is fast, secure, and resilient across multiple sites.

Located between Madison and Milwaukee, Wisconsin since 2009 — direct access to seasoned DNS administrators with extensive BIND experience in enterprise and ISP environments.