NetBox DNS
The NetBox DNS plugin enables NetBox to manage operational DNS data such as name servers, zones, records and views, as well as registration data for domains. It can automate tasks like creating PTR records, generating zone serial numbers, NS and SOA records, as well as validate names and values values for resource records to ensure zone data is consistent, up-to-date and compliant with to the relevant RFCs.
[!WARNING] As a result of some issues with NetBox Branching still under investigation, NetBox DNS is currently not compatible with the new NetBox Branching plugin. This affects multiple aspects of the branching functionality, and currently there is no workaround. Do not try to use NetBox Branching together with NetBox DNS until these issues are resolved. This warning will be updated as soon as the situation is resolved.
Objectives
NetBox DNS is designed to be the 'DNS Source of Truth' analogous to NetBox being the 'Network Source of Truth'.
The plugin stores information about DNS name servers, DNS views and zones, and DNS records, making it a data source for automatic provisioning of DNS instances. Registration information about DNS registrars and contacts for DNS domains can also be stored and associated with zones.
The main focus of the plugin is to ensure the quality of the data stored in it. To achieve this, there are many validation and automation mechanisms in place:
- Validation of record names and values
- Automatic maintenance of PTR records for IPv6 and IPv4 address records
- Automatic generation of SOA records, optionally including the serial number of the zone data
- Validation of changes to the SOA SERIAL number, whether they are done automatically or manually
- Validation of record types such as CNAME and singletons, to ensure DNS zone validity
- Support for RFC 2317 delegation of PTR zones for IPv4 subnets longer than 24 bits
- Templating for zones and records enables faster creations of zones with given boilerplate object relations, such as name servers, tags, tenants or registration information, or records like standard SPF or MX records that are the same for a subset of zones
- IPAM DNSsync can be used to automatically create address and pointer records for IP addresses by assigning prefixes to DNS views. When an IP address has a DNS name assigned and there are zones with matching names in the DNS views linked to the IP address' prefix, a matching DNS record will be created in these zones
- DNSSEC support for storing configuration data relevant to DNSSEC operation in NetBox DNS
Other main features include:
- Support for BIND views, providing lightweight namespaces for zones
- Support for IDN, including the validation of punycode names
- Full support for the NetBox REST and GraphQL APIs
- Support for all major NetBox features such as global search, tenancy, change logs, tagging, journaling etc.
Non-objectives
In the same way as NetBox is not a network management application, NetBox DNS does not provide any functionality to manage specific name servers or DNS service providers or to generate input such as configuration and zone files for them. The focus is on the completeness and integrity of the data needed to run DNS zones, not on the peculiarities of a plethora of servers and services that actually use the data. This functionality is left to specialized integration tools, or in many cases it can be easily implemented using Ansible or similar tools based on NetBox DNS data. Example code for some simple use cases is provided.
For integration with a large number of DNS server implementations integration tools like octodns-netbox-dns are available.
For RFC9432 compatible DNS Servers like BIND, a related plugin netbox-plugin-bind-provisioner provides direct integration using DNS native zone distribution.
Requirements
- NetBox 4.5.0 or higher
- Python 3.12 or higher
Compatibility with NetBox Versions
| NetBox Version | NetBox DNS Version | Comment |
|---|---|---|
| 3.5 | 0.22 | |
| 3.6 | 0.22 | |
| 3.7 | 0.22 | |
| 4.0 - 4.1 | 1.0 | Supports legacy IPAM Coupling |
| 4.0 - 4.1 | 1.1 | Supports IPAM DNSsync |
| 4.2 | 1.2 | |
| 4.3 | 1.3 - 1.4 | |
| 4.4 | 1.4 | |
| 4.5 | 1.5 |
Installation & Configuration
Installation
$ source /opt/netbox/venv/bin/activate
(venv) $ pip install netbox-plugin-dns
NetBox Configuration
Add the plugin to the NetBox config. ~/netbox/configuration.py
PLUGINS = [
"netbox_dns",
]
To permanently keep the plugin installed when updating NetBox via upgrade.sh:
echo netbox-plugin-dns >> ~/netbox/local_requirements.txt
To add the required netbox_dns tables to your database run the following command from your NetBox directory:
./manage.py migrate
Full documentation on using plugins with NetBox: Using Plugins - NetBox Documentation
Contribute
Contributions are always welcome! Please see the Contribution Guidelines
Documentation
For further information, please refer to the full documentation: Using NetBox DNS
License
MIT
2 maintainers
Metadata
2 maintainers
Release files for netbox-plugin-dns 1.5.14
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| netbox_plugin_dns-1.5.14.tar.gz | 151.1 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| netbox_plugin_dns-1.5.14-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 387.5 kB
Release files / netbox_plugin_dns-1.5.14.tar.gz
| Download URL | netbox_plugin_dns-1.5.14.tar.gz |
|---|---|
| Size | 151.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f8cfd6d48907aa404642e86f5dbe178de06f468fbf83c10f324267a022719b43
|
|
BLAKE2b-256 checksum How to use checksums |
508d55a5a570980a2219f8d655879fe88e2cdfc1a728c69463274f20de19ec27
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 3, 2026.
Transparency logRelease files / netbox_plugin_dns-1.5.14-py3-none-any.whl
| Download URL | netbox_plugin_dns-1.5.14-py3-none-any.whl |
|---|---|
| Size | 236.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
49edb94b97b4d745b2aee444410ee1d3e75140cde8e6674f1faeabba111f2ede
|
|
BLAKE2b-256 checksum How to use checksums |
d27437f7dbf21d6ded548d8caf97600ad826a1d957ec38c91167e47345eca381
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.7
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 3, 2026.
Transparency log
