tag: dns
9 posts tagged
Over-Engineering Homelab Syslog Receiving With DNSTAP
Changing per-query DNS telemetry from syslog forwarding to a DNSTAP pipeline, and what the syslog path actually does on the appliance.
read →
The Thing the Index Points To
DNS-AID's path-2 index leaf names a registry the draft explicitly leaves out of scope. Wiring ANS — a registration authority plus transparency log — to be that registry.
read →
Five Fake Agents on a Real Cloudflare Zone
Publishing 5 DNS-AID agent records to darknetian.com — flat primary plus walkable AliasMode, DANE TLSA from throwaway self-signed certs, all DNSSEC-signed end-to-end. No agents actually exist behind any of them.
read →
DNS-AID — DNS-based Agent Identification and Discovery
An IETF draft + open-source reference implementation that lets AI agents discover each other through the internet's existing naming substrate instead of through a new central registry.
read →
EDNS(0) for Agent Discovery — Letting the Client Tell the Resolver What It's Looking For
An experimental EDNS(0) option for DNS-AID that lets a client signal selector filters on the query so any hint-aware hop can narrow the answer or short-circuit with a cached match.
read →
REEF — When the Agent Holds the Pen
An agent loop that reads, reasons, and (with your permission) edits Infoblox Threat Defense policy. Runs against any LLM you point it at — including a 4GB GPU in your homelab.
read →
DCV — Proving an Agent Belongs to a Domain Without a Central Authority
A stateless challenge/response primitive over TXT records that lets a NAT'd agent prove zone control without registering with anyone.
read →
Creating a New DNS Resource Record Type
Why it may be beneficial to think about DNS in a new way.
read →
