high performance DNS/DNSSEC zone validator


Validns is a standalone command line RFC 1034/1035 zone file validation tool that, in addition to basic syntactic and semantic zone checks, includes DNSSEC signature verification and NSEC/NSEC3 chain validation, as well a number of optional policy checks on the zone.

The utility was developed with the goal of it being the last verification step in the chain of production and publication of one or more zones containing up to many thousands (or millions) of signed records, making the speed of operation a primary focus, and reflect on validns’ design.

The utility is currently being used by several major DNS operators.

Currently, validns offers the following features:
 - parse RFC 1035-compliant zone files (so called “BIND” file format)
 - supports most of the standard record types
 - informs the user precisely where and what the errors are
 - verifies RRSIG signatures
 - NSEC/NSEC3 chain validation
 - supports signature validation in the future or in the past
 - built-in policy checks

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install validns