onedns CLI

Manage zones, records, DNSSEC, and DNS security from the command line. Powered by the onedns.io platform.

Quick install (macOS / Linux)

curl -fsSL https://onedns.io/static/cli/onedns -o /usr/local/bin/onedns && chmod +x /usr/local/bin/onedns
🌐

Zone & Record Management

Create zones, add records, upsert with set, verify delegation, and view change history.

🔒

DNSSEC

Enable signing, get DS records for your registrar, and check chain-of-trust status in one command.

🛡️

DNS Firewall

Per-zone rules that block, allow, NXDOMAIN, or drop queries. Actions take effect immediately.

ThreatScript

Push Starlark security policies that run at query time — hot-reload, sandboxed, 2ms budget.

📊

Analytics & Threat Intel

Query analytics, domain reputation scores, passive DNS history, and malware association checks.

📦

Zone Import/Export

Import standard BIND zone files or export zones in BIND or dnsscienced YAML format.

Quick Examples

Zones & Records

# List zones
onedns zones list
# Add an A record
onedns records create example.com \
  --type A --name @ --content 203.0.113.10
# Upsert (idempotent deploy)
onedns records set example.com \
  --type A --name @ --content 203.0.113.10

DNSSEC

# Enable signing
onedns dnssec enable example.com
# Get DS record for registrar
onedns dnssec get-ds example.com
# Check chain-of-trust status
onedns dnssec status example.com

DNS Firewall

# Block a malicious domain
onedns firewall rules add example.com \
  --domain evil.net --action nxdomain
# View firewall rules
onedns firewall rules list example.com

Threat Intel

# Domain reputation score
onedns intel reputation example.com \
  --domain suspicious.net
# Zone threat summary
onedns intel summary example.com
📦 Installation
pip, curl, or clone — get running in under a minute
🚀 Quick Start
Your first zone and record in 5 minutes
📖 Command Reference
Every command, subcommand, and flag
🔑 Authentication
API keys, environment variables, CI/CD setup