DNS Stack · KolBo

DNS Stack — Scale & Protocols

Cardinal #112 tangible-build · Pieces 3+4+8+9+15 consolidated · DNS scale options + blocklist + DoQ protocol

What this vessel does

KolBo DNS foundation (Unbound + AdGuard Home + DoT/DoH/DNSSEC) is LIVE. This vessel surfaces scale options (Knot + dnsdist for multi-region), additional blocklist sources (EasyPrivacy + Disconnect.me), and DoQ protocol future-arc.

Knot Resolver (future scale)

Piece 3

spec

Multi-region scale option; replaces Unbound when customer count > 10K

dnsdist load balancer

Piece 4

spec

PowerDNS team; routes queries to geo-nearest resolver Phase 2+

EasyPrivacy blocklist

Piece 8

spec

CC-BY-SA 3.0; tracker+telemetry; Kavod HaBayis excluded

Disconnect.me tracking

Piece 9

spec

GPL-3.0; per-category subset (advertising/analytics/social/cryptomining)

DNS-over-QUIC (DoQ)

Piece 15

spec

RFC 9250; doq.kolbofilter.com Phase 2; 0-RTT mobile-first performance