Skip to content
OPUSv3
Work·Platforms & Engines·Finishing

Kosher DNS

A filtering DNS resolver, with signed category feeds.

Overview

Kosher DNS is a Go-based filtering DNS resolver. It loads Response Policy Zone (RPZ) feeds signed with Ed25519, swaps categories atomically, and ships an SSE channel for emergency updates. ~1.9K lines of Go, eight regression suites, contract-compliant, no query logging. Ready to deploy on BunnyCDN, AWS Global Accelerator, or self-hosted.

Features

What it does.

  • 01
    RPZ zones, Ed25519-signed
    פידי RPZ חתומים ב-Ed25519
  • 02
    Atomic per-category swap
    החלפה אטומית פר קטגוריה
  • 03
    SSE emergency update channel
    SSE לעדכוני חירום
  • 04
    Audit JSONL, zero query logs
    לוג audit JSONL, ללא שאילתות
Status
Finishing

Core is complete. Final polish, store assets and launch in flight.

K
Next stage

Where this is heading.

Consume real RPZ feeds from Kosher Classifier (replace static fixtures), DoH endpoint operational in production, wire the SSE emergency channel that's already coded into the live deploy.

Closed beta

Closed beta — request access.

This product is gated behind closed beta. Leave your email — every request is reviewed personally and access is granted in batches as testing slots open.

Closed beta. Reviewed manually. No spam.

Next

Kosher Classifier

Platforms & Engines
Kosher Classifier
Classifies domains the way a posek would — signed, auditable, pluralistic.