DNS server software answers name lookups for your own domains, resolves names for your users, or filters unwanted lookups on a network.
This guide ranks thirteen products by the effort of the first ninety days, the cost of support once real traffic arrives, how easily zones leave, and whether you can run it without a partner, preferring small independent makers.
Vendors can pay for more visibility on this website, for example a higher place in a ranking or more room on a page. Commercial relationships can also affect which products we feature and how prominently. Every vendor link is marked the same, whatever the arrangement behind it. How that works.
In short
What DNS server software does
DNS server software publishes zone records, resolves and caches lookups for clients, or blocks chosen domains, running on servers or network hardware that the organisation itself controls.
Our order comes from five tests, taken in turn: effort to set up, what you really pay, what happens to your data on the way out, how locked in you are, and the intended customer. One rule sits on top of those tests: places 1 to 3 go to challengers, vendors outside the best-known brands in a category, wherever the category has them; the established names follow from place 4 in their ranked order. We explain on how we work why the tests are these five and why no product receives a score.
Authoritative-only name server built for speed on POSIX systems
Ranked #1 of 13 in Best DNS Server Software in 2026.
Published pricingElsewhere
Knot DNS is the narrowest product in this ranking, and that is why it leads. The vendor calls it authoritative-only, free to use and available as GPL 3 or later source.
You install it on POSIX hardware you control and nobody sits between you and the software. The cost is the missing half of DNS: no resolver role, and no support terms on the page read, so the first ninety days are spent in documentation.
What stands out
Authoritative only
GPL 3+
POSIX targets
Where it costs you
It answers only for your own zones, so client lookups need a second product such as Unbound.
The page shows no paid plans, and the support page it links to was not retrieved, so help terms are unknown.
Right for
Operators wanting a lean authoritative server on Linux or BSD with no licence cost.
Wrong for
Teams needing a recursive resolver or a vendor support contract.
Not stated by the vendorLicence GPL 3 or later, free to download and use; the page lists no paid plans
Self-hosted authoritative and recursive server with a browser console
Ranked #2 of 13 in Best DNS Server Software in 2026.
Open sourceSelf-hostablePricing on requestElsewhere
Technitium folds two DNS roles into one open source server, which keeps the first ninety days short: install, open the web console, add zones, point clients. Encrypted forwarding over TLS, HTTPS or QUIC is listed.
The weaker side is accountability. No licence text, imprint or support route is on the page read, so a regulated buyer has to chase those answers elsewhere before trusting it with public zones.
What stands out
Authoritative plus recursive
Web console
DoT, DoH, DoQ forwarders
Where it costs you
No licence name appears on the page read, so legal review needs the repository.
No owner, country or address is shown, and no support option is described.
Right for
One administrator wanting zone hosting and client resolving managed from one browser console.
Wrong for
Organisations whose procurement needs a named company and contract.
Not stated by the vendorNo prices or paid plans shown; the software is described as open source for self-hosting
NLnet Labs authoritative nameserver built to answer zone queries quickly
Ranked #3 of 13 in Best DNS Server Software in 2026.
Pricing on requestEurope
NSD is the authoritative half of the NLnet Labs pair. The foundation is a nonprofit with a published Amsterdam address, which makes ownership easy to verify. Support is a separate paid route whose terms were not shown.
Missing from the page is a licence name, so legal checks start in the repository, and the product cannot cache or resolve for clients, which forces a second server into the design.
What stands out
Authoritative nameserver
NLnet Labs
Nonprofit operator
Where it costs you
The page read names no licence for NSD, so terms have to be confirmed in the source.
It serves zones only; lookups for office clients need a separate resolver.
Right for
Zone operators who prefer a foundation-run authoritative server with a named Amsterdam address.
Wrong for
Anyone who needs a licence stated on the vendor page.
NetherlandsProfessional support through a separate page with no plan names or prices shown
Validating recursive resolver from the Amsterdam nonprofit NLnet Labs
Ranked #4 of 13 in Best DNS Server Software in 2026.
Pricing on requestEurope
Unbound has the plainest licence story here: BSD-3-Clause source, a nonprofit foundation, a street address. As a validating, recursive, caching resolver it covers the client side and leaves the zone side alone.
Paid help exists through a support page, yet the home page prints no figures, so that line stays unbudgeted. Pairing it with an authoritative server is a design step, not an option.
What stands out
Recursive resolver
BSD-3-Clause
DNSSEC validating
Where it costs you
It resolves and caches only, with no role for hosting your own public zones.
Support pricing is not on the home page, so the support budget stays unknown.
Right for
Networks wanting a validating cache for clients under a permissive licence from a nonprofit.
Wrong for
Anyone hoping to publish authoritative zones from one product.
NetherlandsSource under the BSD-3-Clause licence; paid professional support listed without plan names or amounts
Plugin-chained DNS server written in Go, graduated at the CNCF
Ranked #5 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
CoreDNS earns its place through the plugin chain: Kubernetes and etcd integration, Prometheus metrics, query rewriting and serving zone files are listed, plus plugins for Azure DNS, GCP Cloud DNS and AWS Route53.
Compiling in only what you need shrinks the footprint. The price is expertise, because configuration is assembled from plugins, and the site mentions no support contract, so the first ninety days belong to your own engineers.
What stands out
Plugin chain
Kubernetes discovery
CNCF graduated
Where it costs you
No commercial support or price is named, so help comes from the project itself.
Choosing and compiling plugins is engineering work that casual administrators may find heavy.
Right for
Platform engineers running Kubernetes who want service discovery and metrics as DNS plugins.
Wrong for
Small offices wanting a simple point-and-click server install.
Not stated by the vendorLicence Apache 2; no paid plans or prices mentioned; copyright held by the CoreDNS Authors and The Linux Foundation
Authoritative, recursive and load-balancing products with a priced support bundle
Ranked #6 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
PowerDNS spans the roles: Authoritative Server, Recursor and DNSdist, with GPL-2.0 source for the authoritative part. That breadth is also the cost driver.
Commercial add-ons such as Lightning Stream Enterprise, ZoneControl and Single Pane of Glass sit beside a bundle priced by core band, and a launch banner offers 15 percent off without naming the product. Budget by asking, since few prices are public.
What stands out
Authoritative Server
Recursor and dnsdist
Core-based bundle
Where it costs you
Only one bundle shows a price, with an unnamed currency, so the real total needs a conversation.
The page names no owner or country, though its footer points to Open-Xchange.
Right for
Hosting providers wanting authoritative and recursive parts from one family with optional paid support.
Wrong for
Buyers who need every module priced before talking to anyone.
Not stated by the vendorAnnual subscription bundle with a listed starting price by core band; other products show no prices; no free trial named
Internet Systems Consortium reference implementation with paid support subscriptions
Ranked #7 of 13 in Best DNS Server Software in 2026.
Open sourcePricing on requestNorth America
BIND sits seventh because it is the broadest, not the weakest. ISC, a nonprofit with a PO Box in New Hampshire, ships it at no cost and sells private support subscriptions without public prices.
ISC also lists Kea DHCP and Stork for graphical management. The weight is learning time: one program, many roles, and only mailing lists and documentation for help unless you contact ISC and pay.
What stands out
Reference implementation
Nonprofit steward
Support subscriptions
Where it costs you
Paid support has no listed plans or prices, so contact is needed for any figure.
Free help stops at documentation, a knowledgebase and mailing lists.
Right for
Administrators who want the long-standing reference server and may later buy ISC support.
Wrong for
Small teams wanting one narrow role with minimal learning.
United StatesSoftware at no cost; professional and enterprise support subscriptions with no plans or prices listed
DNS load balancer from PowerDNS that spreads queries across backends
Ranked #8 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
dnsdist belongs in this ranking as a front door, not a server. It routes across backends, reconfigures through a console while running and exports to Carbon and Prometheus. Rules come in Lua, and YAML arrives from 2.0.0 onward.
Two limits follow: no zones, no resolution of its own, and the vendor page lists neither a licence nor prices. Expect to spend the first weeks on backend design rather than on dnsdist.
What stands out
Load balancer
Abuse awareness
Lua and YAML config
Where it costs you
It only forwards to backends, so it is useless without a separate authoritative or recursive server.
The page read names no licence and gives no prices for private help.
Right for
Operators of several resolvers or authoritative backends who need traffic spreading and abuse handling.
Wrong for
Anyone running one server who needs a complete DNS product.
Not stated by the vendorNo prices listed; installed and run by the user; paid help from the PowerDNS company on contact
Single-binary DNS proxy and ad blocker with YAML rules
Ranked #9 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
Blocky treats DNS as a filtering proxy: blocklists by client group, conditional forwarding, caching with prefetching and DNSSEC. It runs on a Raspberry Pi or OpenWrt router, logs queries to CSV or SQL and exposes REST endpoints.
The limitations are structural. No authoritative role, no commercial support, only a donation request, and a dead project website left the README as the lone source, so verification effort falls on you.
What stands out
DNS proxy
Per-group blocking
Prometheus metrics
Where it costs you
It proxies and filters, so it cannot serve authoritative zones.
The vendor site returned an error, leaving the repository README as the only source.
Right for
Home-lab and small-network owners wanting group-based filtering with metrics from one binary.
Wrong for
Anyone who must publish authoritative zones for a domain.
Not stated by the vendorApache-2.0 licensed with no paid plans or prices; the README asks for donations
Router-level ad and tracker blocker with DoH, DoT and DNSCrypt
Ranked #10 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
AdGuard Home is a filtering appliance more than a DNS server in the classic sense. Installed once, it covers each device through the router, adds a DHCP server and can speak encrypted DNS in both directions.
The licence is GPL v3.0. It does not serve zones, the vendor page lists no support offer for it, and its country is unstated, so a company buyer cannot place the legal entity quickly.
What stands out
Network-wide blocking
Built-in DHCP
DoH and DoT server
Where it costs you
It blocks and forwards, with no authoritative zone hosting.
The footer names Adguard Software Ltd, but no country or owner is given.
Right for
Households and small offices wanting one filter on the router covering every device.
Wrong for
Operators who must host zones or need contracted support.
Not stated by the vendorGNU GPL v3.0 licence; no prices or plan names shown for AdGuard Home on the page read
Volunteer-run network ad blocker with query log and REST API
Ranked #11 of 13 in Best DNS Server Software in 2026.
Self-hostablePricing on requestElsewhere
Pi-hole gives a detailed picture of lookups on a small network: query log, groups, regex lists and a REST API, backed up and restored through Teleporter. It runs on a Raspberry Pi, old PC, VM or NAS.
The cost is institutional. Three named developers, volunteer-run, no owner, no paid plans, only donation links. For a business that means no service level, which is why it ranks below the servers that sell support.
What stands out
Network-wide blocking
EUPL v1.2
Teleporter backup
Where it costs you
It is a filter, so authoritative zones and company-grade support are both absent.
Volunteer-only maintenance with no stated owner means no one to hold to a service level.
Right for
Home networks wanting a visible query log and per-group filtering on a Raspberry Pi.
Wrong for
Businesses needing contracted support or authoritative zone hosting.
Not stated by the vendorLicence EUPL v1.2; no plans or prices, only sponsor and donate options without amounts
Windows DNS server from JH Software with a downloadable evaluation
Ranked #12 of 13 in Best DNS Server Software in 2026.
Pricing on requestElsewhere
Simple DNS Plus is the commercial option for Windows estates. A 14-day evaluation sits next to purchase links for new and additional licences, so a pilot costs nothing.
The weaknesses are plain: edition names and prices were absent from the home page, the buy link failed, no country appears, and nothing suggests a Linux build. That makes budgeting a call to the vendor rather than a lookup.
What stands out
Windows server
14-day evaluation
Per-server licence
Where it costs you
The buy page returned a 404, so edition names and prices could not be confirmed.
It runs on Windows only, with no hosted version described.
Right for
Windows administrators wanting a commercial DNS server they can test for two weeks first.
Wrong for
Linux or BSD shops and anyone who needs visible prices.
Not stated by the vendorLicence purchase per server, with new and additional licence options; 14-day evaluation download; edition prices not shown on the home page
Free Windows DNS proxy that caches answers from upstream servers
Ranked #13 of 13 in Best DNS Server Software in 2026.
Free tierOpen sourcePricing on requestElsewhere
Acrylic is the lightest entry and ranks last because it is a proxy for one operating system. The installer, portable package and Delphi source all carry the GPL version 2 licence, and no paid tier exists.
Its page tells users to verify hashes on files hosted at SourceForge. There is no authoritative role, no vendor support described and no country, so treat it as a desktop cache, not infrastructure.
What stands out
Windows caching proxy
GPL v2
Portable package
Where it costs you
It caches for Windows only and does not host zones.
Downloads come from an external host, so you must verify file hashes yourself.
Right for
Windows users wanting a small local cache in front of existing resolvers.
Wrong for
Teams wanting authoritative zones, Linux support or a vendor contract.
Not stated by the vendorGPL version 2 licence, no premium edition listed and no prices; setup installer, portable package or source
DNS server software publishes zone records, resolves and caches lookups for clients, or blocks chosen domains, running on servers or network hardware that the organisation itself controls. What separates these products is rarely a feature. Work through the steps below.
01
Check who publishes a price
Prices are public at 1 products (Knot DNS) and on request at the remaining 12, so budget time for quotes if your favourite is in that second group.
02
Decide how much the jurisdiction matters
The vendors on this page are based in 3 countries (Elsewhere 10, Europe 2, North America 1). The country of the contracting company sets which authorities can ask it for your data, whatever the hosting region.
03
Check the open source options
Open source here means Technitium DNS Server, BIND, Acrylic DNS Proxy. The price of self-hosting is the time your team spends maintaining it.
DNS server software: authoritative, recursive and filtering are different jobs
Shopping for DNS server software mixes three roles that rarely belong in one box. Knot DNS and NSD answer only for zones you publish. Unbound resolves and caches for your clients. BIND, PowerDNS and Technitium DNS Server cover more than one role, while Pi-hole, AdGuard Home and Blocky filter lookups for a local network without hosting any zone.
A hosting provider and a household both search the same phrase and need unrelated programs. Before comparing licences, write down which question your servers must answer: who owns this domain, where does this client look up names, or which names should be blocked. Then discard every product that serves only a different question.
List the roles you need: authoritative, recursive or filtering
Match each role to a product that names it on its own page
Remove filters such as Pi-hole if you must publish zones
Pricing in DNS server software: free source, paid support, per-core bundles
Money in this market arrives as support, not licences. BIND is free and ISC sells private subscriptions without listing plans. Unbound and NSD point to a Professional Support page from NLnet Labs with no amounts. PowerDNS prints a starting price for an annual bundle sold by core band, while its other products show nothing.
Simple DNS Plus sells licences per server after a 14-day evaluation, but its buy page returned an error. Pi-hole, Blocky and CoreDNS list no paid plans at all, so any support is whatever the community offers. Ask every vendor what covers a weekend outage before the first zone moves, and get the answer in writing with a named currency.
Request the support price for the core count you will run
Confirm the currency, because PowerDNS shows only a dollar sign
Find out who answers if an open source project has no paid route
Running Knot DNS, Unbound or CoreDNS: setup effort in the first ninety days
Setup effort differs more than licence cost. Technitium DNS Server advertises minimal configuration and a browser console, so one administrator can start small. Knot DNS and Unbound ask you to learn configuration files and to pair an authoritative server with a resolver. CoreDNS assembles its behaviour from plugins and rewards teams already on Kubernetes.
dnsdist adds a console and Lua or YAML rules only once several backends exist. Count the hours for zone import, DNSSEC handling, monitoring through Prometheus where the product exports it, and a tested rollback. A server that installs quickly but cannot be monitored will cost more in month three than a stricter one that exports metrics from day one.
Estimate hours for zone import and for a rollback test
Check that metrics export exists before go-live
Plan where the second server, resolver or authoritative, comes from
Leaving a DNS server: BIND zone files, PowerDNS backends and platform lock-in
Exit questions in DNS are practical rather than legal. ISC describes BIND as the original open source implementation, and PowerDNS adds commercial extensions such as ZoneControl and Cloud Control, which are worth testing for export before relying on them. Simple DNS Plus runs on Windows, so leaving it may mean leaving that platform too. Filtering tools such as AdGuard Home, Pi-hole and Blocky hold blocklists and settings rather than zones.
Before signing, export one real zone and one configuration, load them into a second server, and compare answers query by query, including negative responses and records with short lifetimes. Keep the old server running in parallel for a full cycle of your longest record lifetime, so that caches elsewhere expire naturally and any mismatch surfaces while a rollback is still cheap.
Export one production zone and replay it elsewhere
Check whether commercial extensions keep data in a private format
Compare responses from old and new servers for the same queries
What goes wrong most often when buying DNS server software
Putting Pi-hole or AdGuard Home in front of public domains, then discovering that neither one hosts authoritative zones.
Reading BIND as small because it is free, when ISC support for it is a separate subscription with no listed price.
Choosing Unbound alone and finding no way to publish your own domain's records.
Treating the one PowerDNS price as the total, although modules such as ZoneControl and Lightning Stream Enterprise sit outside the bundle.
07
Frequently asked questions
8 answers
What is the best DNS server software in 2026?
First of 13 on this page is Knot DNS. Knot DNS does a single job, answering for the zones you own, and describes itself as a high-performance authoritative-only server with the main features of modern DNS.
It targets Linux, BSDs, macOS and other POSIX systems and shows no prices. The footer credits CZ.NIC; no imprint is visible. It cannot resolve for your clients, so a separate recursive resolver is still needed, and the support page could not be read.
Which DNS server tools publish their pricing?
The ones that do, with the model each states:
Knot DNS: Licence GPL 3 or later, free to download and use; the page lists no paid plans.
Everything else on the list is priced on request.
Is there a free DNS server tool?
Acrylic DNS Proxy have a free plan or free self-hosted edition.
Where are these DNS server software vendors established?
In 3 countries across 3 regions: Elsewhere 10, Europe 2, North America 1.
Knot DNS: Not stated by the vendor.
Technitium DNS Server: Not stated by the vendor.
NSD: Netherlands.
Unbound: Netherlands.
CoreDNS: Not stated by the vendor.
PowerDNS: Not stated by the vendor.
BIND: United States.
dnsdist: Not stated by the vendor.
Blocky: Not stated by the vendor.
AdGuard Home: Not stated by the vendor.
Pi-hole: Not stated by the vendor.
Simple DNS Plus: Not stated by the vendor.
Acrylic DNS Proxy: Not stated by the vendor.
Which DNS server tools are open source?
Technitium DNS Server, BIND, Acrylic DNS Proxy.
Which DNS server tools can you host yourself?
Technitium DNS Server, Pi-hole. 11 products offer no self-hosted option.
What should you use instead of Knot DNS?
The next in line are Technitium DNS Server, aimed at One administrator wanting zone hosting and client resolving managed from one browser console., and NSD, aimed at Zone operators who prefer a foundation-run authoritative server with a named Amsterdam address..
Who should not buy Knot DNS?
Teams needing a recursive resolver or a vendor support contract.. It answers only for your own zones, so client lookups need a second product such as Unbound..
We rank 13 DNS server software products on this page. If we missed one, its maker can write to us about its purpose and customers. We pick what gets added; the terms of a listing are set out under software advice.
