nx_dns_server_daemon.nx
buildroot/runtime/nx_dns_server_daemon.nx
about
nx_dns_server_daemon.nx -- live authoritative DNS daemon.
Closes the DNS half of the sovereign hosting chain. Companion to
nx_audit_server_daemon.nx (TCP/HTTP daemon). Composes:
nx_dns_authoritative.nx -- zone-table + query parse + response build
sys_socket / sys_bind / sys_recvfrom / sys_sendto (UDP)
Binds to 127.0.0.1:5353 by default (unprivileged port; production
:53 requires CAP_NET_BIND_SERVICE or root). Per cardinal
user-owns-every-bit: caller picks the port. Per cardinal feedback-
bounded-loop-discipline: 1M-request budget on the accept loop.
Zone configuration: hard-coded for this v0 to
nishifamily.com -> 192.0.2.42
audit.nishifamily.com -> 192.0.2.43
Future: read from a TOML / JSONL zone file via shipped nx_toml or
nx_jsonl primitives.
expect_exit: 0 (clean exit after 1M-request budget; in normal
daemon operation the supervisor wrapper restarts).
dependencies 2 imports · 0 importers
imports: nx_syscalls_x86_64.nxnx_dns_authoritative.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| 25 | const NXDS_MAGIC_1024: i64 = 1024 |
| 27 | const NXDS_PORT: i64 = 5353 |
| 28 | const NXDS_REQ_CAP: i64 = 4096 // RFC 1035 ยง2.3.4 max UDP |
| 29 | const NXDS_RESP_CAP: i64 = 4096 |
| 30 | const NXDS_REQUEST_BUDGET: i64 = 1000000 |
| 31 | const SOCK_DGRAM: i64 = 2 |
functions
| 33 | func main() -> i64 |