Gonemaster DNS delegation checker

Description

Gonemaster checks the DNS health of a domain by running it through a series of testcases grouped into modules. Each testcase emits log messages that are scored into a numeric result and a letter grade. The modules are:

• basic – does the zone exist and have a working authoritative nameserver.
• address – nameserver IP addresses and their reverse DNS (PTR) mappings.
• connectivity – UDP/TCP reachability and network (ASN and prefix) diversity.
• consistency – whether nameservers agree on SOA, serials, NS sets, and more.
• delegation – parent/child delegation: NS records, glue, and referrals.
• dnssec – the DNSSEC chain of trust: DS, DNSKEY, signatures, and algorithms.
• nameserver – nameserver behaviour and capabilities, such as EDNS handling.
• syntax – hostname and domain name syntax.
• zone – zone-level records such as SOA timers and MX.

The Nagios plugin can do any, or all of these tests for both IPv4 and IPv6.

Project Details