Show HN: dnssec-server – open-source DNS server with built-in DNSSEC in Node.js

Hi HN,

I’ve been working on an open-source project called *dnssec-server*. It’s a modern authoritative DNS server written entirely in Node.js, with built-in *DNSSEC*, *ECS (EDNS Client Subnet)*, and *DNS-over-TLS* support.

I started this because I wanted to enable DNSSEC in my own projects, but noticed how few domains actually use it (<15% adoption worldwide), and I couldn’t find a simple solution in the Node.js ecosystem. Most existing tools felt too heavy or not developer-friendly.

Current features: - DNSSEC signing built-in - ECS surfaced in the API (`req.ecsAddress`, `req.ecsSourcePrefixLength`) - DNS-over-TLS on port 853 - Pure JavaScript, simple API

Still early: - Zone file parsing/migration is TBD - Performance hasn’t been benchmarked at scale yet

Links: - GitHub: https://github.com/colocohen/dnssec-server - npm: https://www.npmjs.com/package/dnssec-server

I’d love feedback from the community — ideas for missing features, pitfalls you see for production, or any crazy self-hosted use cases you’d try with this.

Thanks!