Secure DNS-over-HTTPS with Enterprise Authentication
Squawk DNS provides enterprise-grade DNS-over-HTTPS services with mTLS authentication, comprehensive security features, and high-performance infrastructure. Perfect for organizations requiring secure, authenticated DNS resolution.
# Quick Start with Docker
docker run -p 53:53/udp -p 53:53/tcp \
-e SQUAWK_SERVER_URL=https://dns.squawkdns.com:8443 \
-e SQUAWK_AUTH_TOKEN=your-secure-token \
penguincloud/squawk-dns-client:latest forward -v
# Go Client (Enterprise Users)
wget https://github.com/penguincloud/squawk/releases/latest/download/squawk-linux-amd64
chmod +x squawk-linux-amd64
./squawk-linux-amd64 resolve example.com
# Python Client (System Tray)
wget https://github.com/penguincloud/squawk/releases/download/v2.0.0/squawk-dns-client_2.0.0_amd64.deb
sudo dpkg -i squawk-dns-client_2.0.0_amd64.debChoose Your Edition
Community, Enterprise, or Embedded - all with enterprise-grade security
Community Edition
Free & Open Source
- Basic DNS-over-HTTPS resolution
- mTLS authentication support
- Standard caching with Redis/Valkey
- Single-token authentication
- Basic DNS blacklisting
- Web console interface
- Docker deployment
Enterprise Edition
Licensed with Professional Support
Key Enterprise Benefit:
Selective DNS Routing - One secure endpoint that provides private AND public DNS entries based on user/group permissions. Internal users get corporate DNS + public internet, external users get public only.
- All Community features
- Per-user token management
- Advanced analytics & reporting
- Priority DNS resolution
- Enhanced caching optimization
- Multi-tenant architecture
- Professional technical support
- Enterprise SLA
Embedded Edition
License for Product Integration
Key Embedded Benefits:
Product Integration - License Squawk DNS to embed inside your own products, applications, or hardware solutions. Custom pricing and terms available.
- All Community features
- Embed in your products
- White-label licensing
- Custom branding options
- Redistribution rights
- Volume pricing discounts
- Custom support terms
- Pricing negotiated per use case
Advanced Security
mTLS authentication, DNS blackholing with Maravento integration, brute force protection, and comprehensive security logging.
DNS Privacy Protection
Keep your services private - external endpoints accessible by IP without exposing them in public DNS records. Perfect for internal services.
High Performance
HTTP/3 support, Redis caching, async processing, and Go client with ~10ms cold start and minimal memory usage.
Enterprise Ready
SSO integration (SAML, LDAP, OAuth2), MFA support, web console, role-based access, and comprehensive auditing.
Private Service Discovery
Revolutionary approach to service privacy: Your external services remain accessible by IP address while staying completely invisible in public DNS. No DNS records = no attack surface for reconnaissance.
One Secure DNS Endpoint, Multiple Access Levels
The revolutionary selective DNS routing feature allows you to serve different DNS responses to different users from a single secure endpoint, based on authentication and permissions.
Internal Users
Get access to private corporate DNS entries + public internet DNS
External Users
Receive only public DNS resolution - private entries remain hidden
Secure Authentication
Token-based authentication ensures only authorized users access private DNS
nslookup internal.company.com
Server: dns.company.com
Address: 10.0.1.100
internal.company.com resolves to:
10.0.50.5 (Private server accessible)nslookup internal.company.com
Server: dns.company.com
Address: NXDOMAIN
internal.company.com:
Domain not found (Private entries hidden)10ms
Go Client Cold Start
1000+
Requests per Second
15MB
Memory Usage
2M+
Blocked Domains
Ready to Secure Your DNS?
Get started with Squawk DNS today. Deploy in minutes with Docker or native packages.