Portable
Static linkage
Supports any modern Linux® distribution: from edge IoT devices to distributed cloud systems.
PRODUCTS / hench DNS
Instant DNS security
Defend your entire network against malware, malicious ads, and phishing attempts.
Low latency. High impact. Achieve effortless protection across every device. Who could've predicted that in 2026 freedom from disruptive online threats would fit into just one megabyte?
Optimal
~1 MB footprint
Optimised hot path with Bloom filters & zero copy networking to handle any RPS.
Simple
No dependencies
Fully self-contained for instant deployment to any compatible platform.
Deploy
Download the latest build
Your new advent calendar, public builds unlock every week until 2026
Roadmap
- Q4 · 2025Shipped
Technology Preview
Core functionality: a high-performance stub DNS resolver with user-defined domain filters
- Dual-stack IP
- Probabilistic filtering
- Query caching
- TOML config
- Q1 · 2026In progress
DNS Extensions
Increased flexibility through CLI commands and the introduction of common DNS extensions
- CLI mode
- DNSSEC
- EDNS
- Q2 · 2026
General Availability
Support for recursively resolving queries and handling DNS-over-HTTPS and DNS-over-TLS
- Recursive resolver
- DNS-over-HTTPS (DoH)
- DNS-over-TLS (DoT)
Configure
Example configuration
Demonstration values below, tweak to match your environment and use case.
deny.txt
example.com
subdomain.example.com
0.0.0.0 example.com
henchdns.toml
[network]
bind_addr = "127.0.0.1:53"
upstream = [
"192.0.2.1:53",
"[2001:db8::42]:53"
]
[domains]
filters = [
"./deny.txt"
]
[misc]
metrics = false
Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Other brands or product names are the trademarks of their respective owners.