# Install dnsmasq with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper Lightweight DNS forwarder and DHCP server. Version 2.93 via Homebrew; verified 2026-06-04. ## Install ```sh sudo av install brew:dnsmasq ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install dnsmasq ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install dnsmasq ``` Evidence: MacPorts ports tree: net/dnsmasq/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add dnsmasq ``` Evidence: Alpine Linux edge package indexes: dnsmasq from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install dnsmasq ``` Evidence: Debian stable package indexes: dnsmasq from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install dnsmasq ``` Evidence: Fedora Rawhide package metadata: dnsmasq from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#dnsmasq ``` Evidence: nixpkgs package indexes: pkgs/by-name/dn/dnsmasq/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S dnsmasq ``` Evidence: Arch Linux sync databases: dnsmasq from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install dnsmasq ``` Evidence: openSUSE Tumbleweed package metadata: dnsmasq from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:dnsmasq - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.93 - **Source summary:** Lightweight DNS forwarder and DHCP server - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-only OR GPL-3.0-only - **Source archive:** - **Last updated:** 2026-06-04T15:31:34Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - dnsmasq (cli) - dnsmasq (alias) ## Build dependencies - pkgconf ## Install behavior - Post-install hook: not defined - Service: declared - Caveats: On current macOS releases, `/etc/resolver/` resolver overrides do not work if the nameserver is `127.0.0.1` and dnsmasq is running on a non-53 port. To use scoped resolver zones reliably, bind dnsmasq to a non-localhost IP (e.g., a loopback alias like 10.0.0.1) on port 53. - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.93 - Package-manager updated: 2026-06-04 - Local data: ok - Upstream repository: https://thekelleys.org.uk/dnsmasq/doc.html - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage dnsmasq is a lightweight DNS forwarder, DHCP server, router-advertisement daemon, and network-boot helper for small networks. It is one of the classic Unix packages for making a laptop, router, lab VM, or embedded box hand out names and addresses. ### Project history Simon Kelley's dnsmasq project documents a deliberately small service for DNS, DHCP, TFTP, PXE, and related local-network functions. The official documentation emphasizes small-network infrastructure: local DNS caching and forwarding, DHCP leases, static host mappings, and boot services without deploying a full enterprise DNS/DHCP suite. The public dnsmasq site keeps the manual, downloads, changelog, and gitweb repository together, reflecting its older upstream style: a compact C daemon, tarball releases, a traditional mailing-list-oriented maintenance model, and broad downstream packaging. ### Adoption history dnsmasq became widely adopted because it solves the ordinary edge-network problem in one daemon. It is packaged by Homebrew, Debian and Ubuntu, Fedora/DNF, Alpine, Arch, MacPorts, Nix, and openSUSE-style distributions, and it appears in routers, virtualization setups, container labs, and developer machines. Its adoption history is also tied to network appliances and local development tooling: dnsmasq can be the DNS cache on a router, the DHCP server on a test subnet, or the wildcard/local-domain resolver on a developer laptop. ### How it is used Administrators use dnsmasq to cache and forward DNS, serve DHCP leases, define local hostnames, provide TFTP/PXE boot support, and advertise IPv6 router information. It is commonly configured with a single dnsmasq.conf file plus optional hosts and lease files. Package users care that dnsmasq is small enough to run on embedded systems but standard enough to be scripted and supervised like any other Unix daemon. ### Why package nerds care dnsmasq is package-nerd infrastructure canon: tiny, old, everywhere, and still the fastest route from blank machine to working local DNS and DHCP. It often appears as a transitive operational dependency behind friendlier tools. Its significance is also historical. Before every platform had polished local-network UX, dnsmasq was the practical package that let developers and operators compose DNS, DHCP, TFTP, and lab-network behavior from one service. ### Timeline - 2004: The official changelog records dnsmasq 2.x-era releases. - 2010s: dnsmasq becomes common in Linux distributions, routers, virtualization, and developer-network workflows. - 2020s: The project continues from its official site with tarball releases, manual pages, and a public gitweb repository. ### Related projects - Related projects include Unbound and BIND for heavier DNS service, ISC Kea for larger DHCP deployments, dnscrypt-proxy for encrypted upstream DNS forwarding, and dnsdist for load balancing and traffic control in larger DNS environments. ### Sources - - - - - ## Security Notes broad file, network, media, or database tool signal. formula declares a Homebrew service. - **Geiger risk:** orange / medium - broad file, network, media, or database tool signal - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/dnsmasq.conf, /usr/local/etc/dnsmasq.conf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** dnsmasq - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - dnsmasq - 2.91-1+deb13u1: normalized package name match | Debian stable package indexes: dnsmasq from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Small caching DNS proxy and DHCP/TFTP server - system daemon | https://www.thekelleys.org.uk/dnsmasq/doc.html - Debian apt - dnsmasq-base - 2.91-1+deb13u1: normalized package name match | Debian stable package indexes: dnsmasq-base from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Small caching DNS proxy and DHCP/TFTP server - executable | https://www.thekelleys.org.uk/dnsmasq/doc.html - Debian apt - dnsmasq-base-lua - 2.91-1+deb13u1: normalized package name match | Debian stable package indexes: dnsmasq-base-lua from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Small caching DNS proxy and DHCP/TFTP server - executable, Lua-enabled | https://www.thekelleys.org.uk/dnsmasq/doc.html - Debian apt - dnsmasq-utils - 2.91-1+deb13u1: normalized package name match | Debian stable package indexes: dnsmasq-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Utilities for manipulating DHCP leases | https://www.thekelleys.org.uk/dnsmasq/doc.html - Nix - dnsmasq: normalized package name match | nixpkgs package indexes: pkgs/by-name/dn/dnsmasq/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - dnsmasq - 2.90-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: dnsmasq from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Small caching DNS proxy and DHCP/TFTP server - system daemon | https://www.thekelleys.org.uk/dnsmasq/doc.html - Ubuntu apt - dnsmasq-base - 2.90-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: dnsmasq-base from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Small caching DNS proxy and DHCP/TFTP server - executable | https://www.thekelleys.org.uk/dnsmasq/doc.html - Ubuntu apt - dnsmasq-base-lua - 2.90-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: dnsmasq-base-lua from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Small caching DNS proxy and DHCP/TFTP server - executable, Lua-enabled | https://www.thekelleys.org.uk/dnsmasq/doc.html - Ubuntu apt - dnsmasq-utils - 2.90-2build2: normalized package name match | Ubuntu 24.04 LTS package indexes: dnsmasq-utils from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Utilities for manipulating DHCP leases | https://www.thekelleys.org.uk/dnsmasq/doc.html - apk - dnsmasq - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-common - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-common from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server (common files) | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-dnssec - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-dnssec from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC support | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-dnssec-dbus - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-dnssec-dbus from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC and D-Bus support | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-dnssec-nftset - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-dnssec-nftset from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC and nftables set support | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-doc - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server (documentation) | https://www.thekelleys.org.uk/dnsmasq/ - apk - dnsmasq-openrc - 2.93-r0: normalized package name match | Alpine Linux edge package indexes: dnsmasq-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A lightweight DNS, DHCP, RA, TFTP and PXE server (OpenRC init scripts) | https://www.thekelleys.org.uk/dnsmasq/ ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Documentation packages](https://www.automicvault.com/pkg/documentation-tools/) - Matched documentation, manual, or publishing metadata. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [easyengine](https://www.automicvault.com/pkg/brew/easyengine/) - Popular package that depends on this formula. - [chinadns-c](https://www.automicvault.com/pkg/brew/chinadns-c/) - Shares av.db curated category or tags: cli, dns, dns-forwarder, networking. - [hostdb](https://www.automicvault.com/pkg/brew/hostdb/) - Shares av.db curated category or tags: cli, dhcp, dns, networking. - [adns](https://www.automicvault.com/pkg/brew/adns/) - Shares av.db curated category or tags: cli, dns, networking. - [aliddns](https://www.automicvault.com/pkg/brew/aliddns/) - Shares av.db curated category or tags: cli, dns, networking. - [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, dns, networking, server. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Shares av.db curated category or tags: cli, dns, networking. - [cdncheck](https://www.automicvault.com/pkg/brew/cdncheck/) - Shares av.db curated category or tags: cli, dns, networking. - [checkdmarc](https://www.automicvault.com/pkg/brew/checkdmarc/) - Shares av.db curated category or tags: cli, dns, networking. - [coredns](https://www.automicvault.com/pkg/brew/coredns/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, dns, networking, server, service. ## Combined YAML source View the package source record on GitHub. [combined/dnsmasq.yml](https://github.com/automic-vault/db/blob/main/combined/dnsmasq.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph