Automic VaultAutomic Vault

brew

Install dnsviz with Homebrew, apt, dnf, MacPorts, Nix

Tools for analyzing and visualizing DNS and DNSSEC behavior. Version 0.11.1 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install dnsviz

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install dnsviz

MacPorts ports tree · net/dnsviz/Portfile · source: api.github.com

Linux

Debian aptverified · 92%
sudo apt install dnsviz

Debian stable package indexes · dnsviz · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install dnsviz

Fedora Rawhide package metadata · dnsviz · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#dnsviz

nixpkgs package indexes · pkgs/by-name/dn/dnsviz/package.nix · source: api.github.com

overview

Package summary

Tools for analyzing and visualizing DNS and DNSSEC behavior

Commands and aliases

  • dnsviz

history

Project history and usage

DNSViz is a DNS and DNSSEC analysis suite with an unusually visible public-service history: it is both installable software and the engine behind the dnsviz.net diagnostic site.

Its package-nerd importance comes from making DNSSEC validation failures inspectable. Instead of only returning a broken validation result, DNSViz draws the authentication chain, the DNS resolution path, and detected configuration errors.

Project history

DNSViz was developed by Casey Deccio while at Sandia National Laboratories to help administrators understand and troubleshoot DNSSEC deployments after DNSSEC became a practical operational requirement for many zones.

The public dnsviz.net service was already being highlighted by the Internet Society in 2011 as a free DNSSEC testing tool operated by Sandia, and Sandia described the project publicly in January 2012.

The open-source tool suite later settled around the dnsviz GitHub organization. The repository describes the package as the tool suite that powers the web-based DNSViz analysis service.

Adoption history

DNSViz spread through the DNSSEC operations community because it solved a concrete deployment pain: showing why a chain of trust failed and which records or name servers were involved.

It is packaged by multiple Unix-style package managers, including Homebrew, Debian, Fedora, MacPorts, Nix, and Ubuntu, which points to use beyond the hosted site by operators who want local or automated DNSSEC checks.

How it is used

Users can submit a domain to dnsviz.net for a visual DNSSEC analysis, or install the CLI to run probes and generate analysis locally.

The tool is used for DNSSEC pre-deployment testing, post-deployment troubleshooting, and explaining DNSSEC authentication chains to humans who need more than raw dig or delv output.

Why package nerds care

DNSViz sits in the small but important class of DNS tools that are not just query clients: it captures DNS behavior, models validation, and renders the result as an operator-facing graph.

For package metadata, it is a good example of a command-line package whose identity is inseparable from a long-running public web service.

Timeline

  • 2011: Internet Society Deploy360 documented DNSViz as a Sandia-operated DNS visualization tool for DNSSEC testing.
  • 2012: Sandia published a project story describing Casey Deccio's DNSViz work for DNSSEC troubleshooting.
  • 2014: GitHub releases show the 0.1.0 open-source release line for dnsviz.
  • 2024-2025: Later releases modernized dependencies, including replacing M2Crypto with cryptography and fixing dnspython compatibility.

Related projects

  • Related DNSSEC diagnostics include Verisign Labs DNSSEC Debugger, delv from BIND, drill from ldns, and the broader dnspython ecosystem used by many DNS analysis tools.
  • DNSViz also has a separate dnsvizwww repository for the web front end around the analysis engine.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 4 runtime dependencies.
  • Build metadata lists 3 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
dnsvizcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.11.1
manager updated
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/dnsviz/dnsviz

  • infoNo package-manager update timestamp was available.low confidence
  • infoNo cached GitHub release or tag data was available.https://github.com/dnsviz/dnsviznone confidence

install metadata

Package metadata

Package keybrew:dnsviz
Version0.11.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/dnsviz
Homepagehttps://github.com/dnsviz/dnsviz/
Repositoryhttps://github.com/dnsviz/dnsviz
Upstream docshttps://dnsviz.net/
LicenseGPL-2.0-or-later
Source archivehttps://files.pythonhosted.org/packages/59/91/aa152739fea36d4456fbcc71a26333ffef587526d722c10c281ab12a6a35/dnsviz-0.11.1.tar.gz
Dependenciescryptography, graphviz, openssl@3, python@3.14
Build dependenciesbind, pkgconf, swig
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namednsviz
Version Scheme0
Revision2
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

dnsviz 0.11.1-1

Tools for analyzing and visualizing DNS and DNSSEC behavior

https://github.com/dnsviz/dnsviz

sudo apt install dnsviz
  • Section: net
  • Architecture: all
  • 9 dependencies
  • normalized package name match
  • Matched by: Dnsviz
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dnsviz from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

dnsviz

nix profile install nixpkgs#dnsviz
  • normalized package name match
  • Matched by: Dnsviz
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/dn/dnsviz/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

dnsviz 0.9.4-1

Tools for analyzing and visualizing DNS and DNSSEC behavior

https://github.com/dnsviz/dnsviz

sudo apt install dnsviz
  • Section: universe/net
  • Architecture: all
  • 9 dependencies
  • normalized package name match
  • Matched by: Dnsviz
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dnsviz from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf95%

dnsviz 0.11.1-8.fc45

Tools for analyzing and visualizing DNS and DNSSEC behavior

https://github.com/dnsviz/dnsviz

sudo dnf install dnsviz
  • License: GPL-2.0-or-later
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: dnsviz
  • 4 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Dnsviz
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: dnsviz from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

dnsviz

sudo port install dnsviz
  • normalized package name match
  • Matched by: Dnsviz
MacPorts ports tree · api.github.com · MacPorts ports tree: net/dnsviz/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • graphvizRuntime dependency declared by Homebrew.
  • openssl@3Runtime dependency declared by Homebrew.
  • python@3.14Runtime dependency declared by Homebrew.
  • bindBuild dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • swigBuild dependency declared by Homebrew.

Same workflow

  • dnstracerShares av.db curated category or tags: cli, diagnostics, dns, networking.
  • getdnsShares av.db curated category or tags: cli, dns, dnssec, networking.
  • jdnssec-toolsShares av.db curated category or tags: cli, dns, dnssec, networking.
  • knotShares av.db curated category or tags: cli, dns, dnssec, networking.
  • knot-resolverShares av.db curated category or tags: cli, dns, dnssec, networking.
  • ldnsShares av.db curated category or tags: cli, dns, dnssec, networking.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment