ASPnix's DNS infrastructure is built on two primary software platforms depending on the environment. Our Windows-based services authoritative DNS servers use Technitium DNS, an open source DNS solution that provides robust features and seamless integration with the Windows ecosystem. Our Linux-based (cPanel) services authoritative DNS servers use PowerDNS. Within our primary facility (Denver, CO), our internal resolvers also use Technitium DNS and provide standard DNS support as well as DoH, DoT, and DoQ support for privacy along with security features such as QNAME randomization, QNAME minimization, and NS revalidation.

DNS is the foundation of internet connectivity, translating domain names into IP addresses that browsers and applications actually use. Any downtime, latency, or vulnerability at this layer immediately affects site availability and can expose users to cache poisoning, eavesdropping, or redirection attacks. We selected Technitium DNS and PowerDNS after evaluating stability, performance on their respective operating systems, ongoing maintenance, and support for current privacy standards. These choices let us deliver consistent, high-uptime DNS resolution across all customer services without requiring any special configuration on your part.

#Authoritative DNS Servers

#Windows-Based Services

All Windows hosting accounts rely on Technitium DNS to serve authoritative responses for their domains. As an open-source server built for the Windows platform, it integrates directly with our Windows Server infrastructure and offers low-latency query handling, a comprehensive API for automation, and support for every DNS record type needed by modern applications including A, AAAA, MX, TXT, SRV, and CNAME. We manage patching, monitoring, and zone synchronization centrally so customers receive reliable resolution regardless of traffic spikes or global query volume.

#Linux cPanel Services

Linux servers provisioned with the cPanel control panel use PowerDNS as the authoritative engine. PowerDNS is engineered for rapid zone updates and high concurrent query loads typical of shared hosting, where hundreds or thousands of domains share the same nameserver cluster. It pairs cleanly with cPanel's DNS management interface, allowing customers to add, edit, or remove records through a familiar web UI while the backend handles propagation and redundancy across our nameserver fleet.

#Internal DNS Resolvers

In our primary Denver, Colorado facility the recursive resolvers that handle both internal system lookups and customer-initiated queries also run Technitium DNS. These servers perform full recursion against root and TLD nameservers on behalf of clients, cache responses for performance, and apply uniform policy controls. Because the same software powers both authoritative and recursive roles, we maintain consistent logging, security posture, and update cycles across the entire DNS stack.

#Privacy Protocols and Security Features

Standard unencrypted DNS queries can be observed or modified in transit. Our Technitium resolvers address this with encrypted transport options and defensive query handling that reduce attack surface and limit data leakage:

  • DoH (DNS over HTTPS) – encapsulates queries inside HTTPS sessions so they cannot be distinguished from normal web traffic
  • DoT (DNS over TLS) – provides dedicated TLS-encrypted channels specifically for DNS
  • DoQ (DNS over QUIC) – uses the QUIC transport for encrypted, low-latency, multiplexed resolution
  • QNAME randomization – randomizes letter case in query names to disrupt signature-based cache-poisoning attacks
  • QNAME minimization – sends only the minimal labels required to each upstream server, improving client privacy
  • NS revalidation – periodically rechecks delegation records to detect and discard stale or poisoned nameserver data

#Testing DNS Resolution

Most operating systems include tools to verify that your domains resolve correctly through our infrastructure or any other resolver. On Windows servers or workstations the built-in PowerShell cmdlet provides quick validation without installing additional software.

powershell 
Resolve-DnsName -Name "example.com" -Type A
# Returns A records for the domain using the configured system resolver

Resolve-DnsName -Name "example.com" -Type MX
# Retrieves mail exchanger records

Our use of Technitium DNS and PowerDNS delivers a secure, private, and reliable DNS experience by default. These systems are monitored continuously and benefit from automatic failover and anycast routing where appropriate. For hands-on management of your own zones, TTL settings, or custom records, use the DNS editor inside the client portal. Related articles cover zone management, propagation expectations, and common record configurations.