DNSViz vs DNSViz Toolkit
DNSViz
dnsviz.netDNSViz Toolkit
github.comSide by side
| Figure | DNSViz | DNSViz Toolkit |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Network Diagnostic Software | 8.7 (#5) | 8.1 (#11) |
| Container | A ready-to-use Docker container is available as dnsviz/dnsviz. | A ready-to-use Docker container is available, and the project recommends host networking for authoritative queries. |
| Dependencies | The documented dependencies include Python, dnspython, pygraphviz, and cryptography. | The listed dependencies include Python, dnspython, pygraphviz, and cryptography; Graphviz and OpenSSL are among non-Python dependencies. |
| Intended users | The project describes DNSViz as a resource for understanding and troubleshooting DNSSEC deployment. | The maker describes DNSViz as a resource for understanding and troubleshooting DNSSEC deployment. |
| Pre-deployment testing | DNSViz documents pre-deployment testing for zones and proposed delegation, glue, and DS record changes. | It supports diagnostic testing of zone files and planned delegation, glue, and DS record changes before deployment. |
| Purpose | DNSViz visualizes DNS zone status to help understand and troubleshoot DNSSEC deployment. | DNSViz analyzes and visualizes DNS behavior, including DNSSEC security extensions. |
| Support | The website invites users to submit questions, comments, and feedback. | The project invites questions and comments through its contact form and says the reply email is used only to return correspondence. |
Plans
In their own words
DNSViz
DNSViz is a free, open-source tool for visualizing DNS zone status and investigating DNSSEC deployment. It lays out a domain's authentication chain and resolution path, and identifies configuration errors. The graph can show delegations, record sets, negative responses, DNSKEY and DS records, signatures, wildcards, warnings and errors. It classifies DNS data as secure, bogus or insecure according to whether a trust chain reaches an anchor. The web service can run new analyses, but its maintenance mode means historical analyses cannot be loaded and new results cannot be saved to its database. For command-line use, the suite includes tools to query DNS, assess results and produce graph or text output. Queries use recursive resolvers by default, or authoritative servers when requested; graph output can be an image, DOT graph or HTML file. DNSViz documents installation on Linux, macOS and FreeBSD, among other Python-supported environments, and provides a Docker container. It is intended for understanding and troubleshooting DNSSEC, including pre-deployment checks of proposed zone and delegation changes.
DNSViz Toolkit
DNSViz Toolkit has no write-up on Specifiction yet; its figures are above.