KAMDNS
DNSALLOWLIST

KAMDNS

Subscription DNS.
Never an open resolver.

Multi-tenant control plane for resellers who run their own Unbound edges — IP leases, nftables allowlists, fail-closed enforcement.

Sign inCreate account

THE MODEL

License resellers. They sell plans. Users activate their public IP.

Super admin grants platform licenses. Each admin brings their own VPS fleet and sells tenant plans. One activate fans out across every active DNS server they own.

  1. 01

    Platform license

    Super admin issues plans with caps on users, DNS servers, and networks per customer.

  2. 02

    Reseller edge

    Admin registers Unbound hosts, installs the agent, and defines customer plans like GAMER.

  3. 03

    Activate & resolve

    Subscribed users activate; their public IP is allowlisted on every live server — nothing else gets answers.

EDGE ENFORCEMENT

Postgres is truth. Redis is cache. nftables is the gate.

Agents sync allowlist revisions to each VPS. Unknown IPs stay blocked. Rate limits and abuse blocks push offenders off the set. Fail closed — if the agent is down, the set does not open the world.

  • IP leases
    Time-bound public IPs tied to an active user subscription.
  • Multi-server fan-out
    One activate authorizes the same IP on all of the admin’s active resolvers.
  • Abuse controls
    Manual and automatic blocks remove IPs from the allowlist on the next sync.

Run DNS as a product — not as a public amenity.

Sign in to the control plane, or create a customer account under your reseller tenant.

Open consoleRegister