OPUS
Work·Platforms & Engines·Finishing

Kosher DNS

A filtering DNS resolver, with signed category feeds.

Overview

Kosher DNS is a Go-based filtering DNS resolver. It loads Response Policy Zone (RPZ) feeds signed with Ed25519, swaps categories atomically, and ships an SSE channel for emergency updates. ~1.9K lines of Go, eight regression suites, contract-compliant, no query logging. Ready to deploy on BunnyCDN, AWS Global Accelerator, or self-hosted.

Features

What it does.

  • 01
    RPZ zones, Ed25519-signed
    פידי RPZ חתומים ב-Ed25519
  • 02
    Atomic per-category swap
    החלפה אטומית פר קטגוריה
  • 03
    SSE emergency update channel
    SSE לעדכוני חירום
  • 04
    Audit JSONL, zero query logs
    לוג audit JSONL, ללא שאילתות
Status
Finishing

Core is complete. Final polish, store assets and launch in flight.

K
Next stage

Where this is heading.

Consume real RPZ feeds from Kosher Classifier (replace static fixtures), DoH endpoint operational in production, wire the SSE emergency channel that's already coded into the live deploy.

Early access

Not in the store yet.

This one is still in development. Leave your email and you'll be the first to know when it ships.

No spam. Just launch notifications.

Next

Kosher Classifier

Platforms & Engines
Kosher Classifier
Classifies domains the way a posek would — signed, auditable, pluralistic.