Daddybound

DNS transport, local validation and traffic learning.

Experimental

Fresh and reset demo sessions start in Forward. Choose a draft, then apply it locally.

Local DNSSEC mode

ForwardUse the configured forwarding path. No Daddybound local DNSSEC validation.LearnReturn the forwarded answer, then sample local validation in the background.LiveEXPERIMENTAL: locally validate before returning the client answer.

Applied: forward

DNS transport

Choose where DNS answers and supporting DNSSEC records come from.

Encrypted forwarding

Native iterativeNative Live reaches authoritative DNS over plaintext UDP/TCP 53. DNSSEC authenticates records; it does not encrypt transport.Encrypted forwardingUse only the approved ordered endpoints with authenticated TLS 1.3 and no plaintext fallback. The selected provider receives the queried names.

Start with a documented example

This fills a draft only. It grants no consent, sends no query and changes no applied setting.

Forwarder 1

ProtocolEndpoint addressTLS server nameBootstrap IP addresses

I agree to send DNS queries and supporting DNSSEC lookups to these forwarders, including the fixed simulated test query if I select Test endpoints.

Every test and apply action here is simulated locally. No provider, resolver, port or TLS service is contacted.

Local traffic learning

On-device baseline and advisory findings.

Experimental

Learning compares each synthetic client's recent windows with its local baseline. It alerts and explains; it never auto-blocks, retrains policy or calls an external AI service.

Learning does not enforce blocks. Review unusual activity alongside the original query evidence.