Hench Technology

PRODUCTS / hench DNS

Instant DNS security

Defend your entire network against malware, malicious ads, and phishing attempts.

Low latency. High impact. Achieve effortless protection across every device. Who could've predicted that in 2025 freedom from disruptive online threats would fit into just one megabyte?

Download NowRoadmap
Portable

Static linkage

Supports any modern Linux® distribution: from edge IoT devices to distributed cloud systems.

Optimal

~1 MB footprint

Optimised hot path with Bloom filters & zero copy networking to handle any RPS.

Simple

No dependencies

Fully self-contained for instant deployment to any compatible platform.

Deploy

Download the latest build

Your new advent calendar, public builds unlock every week until 2026

x86_64Download
1580 KBLinux kernel 5.8+12-01-2026
SHA256: 4135d2b3cc4c0ed02f7fce666d9cc4c0aeb6a7bd6f72b2acc614d2af77f68031

 

AArch64Download
1460 KBLinux kernel 5.8+12-01-2026
SHA256: ee3c88546a8be1f528cdb7f2e1c07d816cc7fdf8c1fd2b97d7d487b52cf85c91

 

Roadmap

  1. Q4 · 2025
    Shipped

    Technology Preview

    Core functionality: a high-performance stub DNS resolver with user-defined domain filters

    • Dual-stack IP
    • Probabilistic filtering
    • Query caching
    • TOML config
  2. Q1 · 2026
    In progress

    DNS Extensions

    Increased flexibility through CLI commands and the introduction of common DNS extensions

    • CLI mode
    • DNSSEC
    • EDNS
  3. Q2 · 2026

    General Availability

    Support for recursively resolving queries and handling DNS-over-HTTPS and DNS-over-TLS

    • Recursive resolver
    • DNS-over-HTTPS (DoH)
    • DNS-over-TLS (DoT)
  4. Q3 · 2026

    UX Extensions

    Runtime dashboard with a focus on observability, strong IAM and rich metrics

    • Control plane
    • FIDO2 authentication
    • IAM framework
    • RISC-V build

Configure

Example configuration

Demonstration values below, tweak to match your environment and use case.

deny.txt
example.com
subdomain.example.com
0.0.0.0 example.com
henchdns.toml
[network]bind_addr = "127.0.0.1:53"
upstream = [
"192.0.2.1:53","[2001:db8::42]:53"]

[domains]filters = [
"./deny.txt"]

[misc]metrics = false

Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Other brands or product names are the trademarks of their respective owners.