DNSBOX200 is an advanced DNS slave, recursive resolver (DNS cache) and DHCP server for high performance and security needs. It is a very flexible appliance, which can be licenced for whichever of the 3 services you need and adapts to the specific role(s) to give you a fit-for-purpose device.
 |
It can be deployed in different ways:
- Managed seamlessly from the DNSBOX400 / DNSBOX300 master web interface
- Linked to other DNS or DHCP servers
- As a standalone server (DNS cache or DHCP)
In addition, DNSBOX200 can be used as a DNS master, for editing authoritative DNS records. |
DNSBOX200 runs authoritative and recursive (cache) DNS as separate services on the same physical server. This:
- Improves security by isolating the authoritative server from the more vulnerable DNS cache
- Means you can follow this best practice approach yet only need to pay for and manage one physical server – the best of both worlds
- Gives you better performance as specialised software is used for the individual services:
- BIND for authoritative
- Unbound for recursive
When you use the authoritative resolver as a DNS slave…
- You have the specialist DNS admin features you need on a slave:
- Ability to display, filter and search for zones, as well as view their status
- Real-time and historical graphs on performance of your DNS service
- Easy monitoring of slaved zones
- Support for slave and stub zones
- IPv6 support

- Additional features make the service even more secure and reliable:
- Support for DNSSEC signed zones
- TSIG Keys
- IP-secured connections with other DNS servers
- Offline master mode – serving zones from their last known ‘good’ state
Download DNSBOX200‘s factsheet (pdf, 403k)
When you use the recursive resolver (DNS cache)…
- Because the server is Unbound, you get a more secure solution and carrier-grade caching performance – 2.5x performance of BIND
- You have the specialist DNS admin features you need:
- Ability to display, filter, add, edit, delete and search for forward zones
- Automatic forward zones creation for local zones
- Real-time and historical graphs on performance of your DNS service
- Logging recursive queries to syslog and local log
- IPv6 support

- Additional features make the service even more secure and reliable:
- Cache poisoning protection
- DDoS attacks protection
- DNSSEC validation
- High availability load balanced clustering
Download DNSBOX200‘s factsheet (pdf, 403k)
When you use the DHCP Server…
- DHCP configuration is easy and accurate
- Automated validation of DHCP configurations
- Custom configuration fields
- Import/export option for easy backups and ability to copy changes between servers
- Ability to group hosts, subnets and networks
- Support for all DHCPD options
- Ability to assign static IP addresses to clients using MAC authentication
- Automated log rotation
- IPv6 and DHCPv6 support

- You can easily set up DHCP failover to ensure maximum availability
- Single web interface for managing all failover units
- Only the primary needs to be configured
- Automated replication of changes to a secondary active unit
- Informative DHCP statistics give you full visibility of the service. You can:
- View and search for leases
- View and search for hosts, zones, subnets and IP ranges
- Group subnets
- Store additional information about devices
Download DNSBOX200 for DHCP Factsheet (pdf, 945.14kB)
User feedback has always rated the DNSBOX DHCP solution highly. With increasing need for stand-alone DHCP, in 2021 we decided to re-build it from the ground up, to build indisputably the world’s best DHCP server. Informed by expert customer insight every step of the way, that’s what we’ve done.
If you have just a few small zones, you can use
DNSBOX
200 as a DNS master for editing authoritative DNS records simply by switching its operating mode from slave to master.
When you use the authoritative resolver as a DNS master…
- You have the specialist DNS admin features you need:
- Ability to display, add, delete, edit, filter and search for zones, as well as view their status
- Real-time and historical graphs on performance of your DNS service
- Easy monitoring of slaved zones
- Support for slave and stub zones
- Automated validation of DNS configuration
- IPv6 support
- Additional features make the service even more secure and reliable:
- Support for DNSSEC signed zones
- TSIG Keys
- IP-secured connections with other DNS servers
