Enterprise License

Why Run Your Own Instance?

The public site at dnslurp.esoup.net is great for quick lookups, but an enterprise instance unlocks capabilities you can't get from a public tool:

Get a License

Contact us: Email support@esoup.net for payment options, volume licensing, or questions about enterprise deployment. We'll get you set up with a license and binaries for your platforms.

Self-service with crypto: Purchase instantly with USDC via the x402 protocol. No accounts, no forms — pay with your wallet and receive your license and downloads automatically.

Enterprise Features

A licensed instance is a standalone DNS lookup tool with no rate limits, no external dependencies, and full configuration control.

Supported Platforms

darwin-arm64 (Apple Silicon Mac) darwin-x64 (Intel Mac) linux-x64 linux-arm64 windows-x64 (Authenticode signed)

How to Purchase

The license purchase uses the x402 HTTP payment protocol. An x402-compatible wallet or the @x402/fetch library handles the payment flow automatically.

curl https://dnslurp.esoup.net/api/license/purchase
# Returns 402 with x402 payment requirements

// Automatic payment with @x402/fetch
import { wrapFetchWithPaymentFromConfig } from '@x402/fetch';
const payingFetch = wrapFetchWithPaymentFromConfig(fetch, { schemes: [...] });
const res = await payingFetch('https://dnslurp.esoup.net/api/license/purchase');

# Download, configure, run
./dnslurp
# Output: Licensed to: 0xYourWallet...

Already Purchased?

If you've already paid, provide your wallet address to get a fresh download token and re-download your binaries:

curl "https://dnslurp.esoup.net/api/license/purchase?wallet=0xYOUR_WALLET"
# Returns license + accessToken + download links if active

# Download with your token
curl -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  "https://dnslurp.esoup.net/api/license/download/linux-x64" -o dnslurp

License expired? The endpoint returns 402 again — pay to renew.

Deployment Ideas

DNSlurp is a single binary that listens on a configurable port. Run it however suits your environment:

Place license.json in the same directory as the binary, or in the working directory. Optionally add a config.json to customize DNS servers, branding, and rate limits.

Configuration Reference

DNSlurp works out of the box with sensible defaults. To customize, place a config.json in the same directory as the binary. Environment variables override config.json, which overrides built-in defaults.

Priority: Environment Variables > config.json > Built-in Defaults

Example config.json

{
  // HTTP server
  "port": 3000,
  "hostname": "127.0.0.1",

  // DNS servers shown in the UI
  "servers": {
    "standard": [
      { "address": "8.8.8.8", "name": "Google", "protocol": "UDP", "checked": true },
      { "address": "1.1.1.1", "name": "Cloudflare", "protocol": "UDP", "checked": true },
      { "address": "9.9.9.9", "name": "Quad9", "protocol": "UDP", "checked": false },
      { "address": "10.0.0.53", "name": "Internal AD", "protocol": "UDP", "checked": true },
      { "address": "10.0.0.54", "name": "Pi-hole", "protocol": "UDP", "checked": false }
    ],
    "doh": [
      { "address": "dns.google", "name": "Google DoH", "protocol": "DoH" },
      { "address": "cloudflare-dns.com", "name": "Cloudflare DoH", "protocol": "DoH" }
    ]
  },

  // Rate limiting
  "rateLimit": {
    "enabled": true,
    "requestsPerMinute": 60,
    "dailyLimit": 5000,
    "whitelist": ["10.0.0.0/8", "192.168.1.0/24"]
  },

  // UI branding
  "branding": {
    "title": "ACME DNS Lookup",
    "aboutUrl": "https://intranet.acme.com/dns-tool"
  },

  // Audit logging
  "audit": {
    "enabled": true,
    "destination": "syslog",
    "syslog": {
      "host": "siem.acme.com",
      "port": 514,
      "facility": "local0",
      "appName": "dnslurp"
    }
  }
}

DNS Servers

Each server entry has four fields:

Rate Limiting

Branding

Audit Logging

Every DNS lookup can be logged for compliance and security monitoring.

Environment Variable Overrides

Environment variables take priority over config.json. Useful for containers and systemd.

Binary Integrity

Verify your download matches the published SHA-256 hashes. The Windows binary is additionally Authenticode signed (BLACK HAT BOOZE LLC via SSL.com).

Verify on macOS/Linux: sha256sum dnslurp-linux-x64 or shasum -a 256 dnslurp-darwin-arm64