PowerDNS Recursor review
A programmable recursive resolver with DNSSEC, Lua policies, APIs, and operational metrics.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
PowerDNS Recursor is an open-source recursive DNS resolver and caching server for internet service providers, network operators, enterprises, and other organizations operating DNS infrastructure. It resolves client queries through recursion across the global DNS system, caches responses, processes and validates DNSSEC, and supports DNS64 for IPv6-only clients. It can run on physical, virtual, or cloud-native infrastructure across Linux, BSD, macOS, and other Unix-like systems, with command-line tools, configuration files, and a built-in JSON/REST API.
Its strongest differentiator is programmability. Lua scripting supports dynamic responses and policy handling, giving operators a way to shape DNS behavior within the resolver. The JSON/REST API adds an automation path, while operational metrics, logging, and statistics support ongoing administration. Configuration is available through YAML or legacy configuration files, so deployment can fit existing operational practices. According to the published product details, the software is free and open source rather than divided into paid feature tiers.
PowerDNS Recursor is a focused choice for teams that need recursive caching, DNSSEC validation, policy logic, DNS64, and operational interfaces in a self-hosted DNS component. It is not positioned as an authoritative DNS server, so organizations needing both roles should evaluate whether another product is required for authoritative service. The published scope also does not verify encrypted client-query protocols for Recursor alone; DoT, DoH, DoQ, and DoH3 are described for the PowerDNS load balancer/dnsdist, while Recursor documentation covers outgoing DoT to authoritative nameservers. Choose Recursor for programmable recursive DNS infrastructure, not as a broad all-in-one DNS platform.
PowerDNS Recursor pros and cons
- Where it wins
- Lua scripting supports dynamic responses and DNS policies
- Built-in JSON/REST API supports operations and automation
- DNSSEC validation, DNS64, caching, metrics, and logging included
- Where it doesn't
- Focused on recursive DNS rather than authoritative DNS
- No verified encrypted client-query protocol for Recursor alone
- Configuration uses YAML or legacy configuration files
PowerDNS Recursor fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update