Industrial Track Systems Artifact

dns-server-mosDNS that lives in your menu bar.

A protected, binary-only macOS resolver for deterministic local overrides, encrypted upstream forwarding, and operator-grade observability—without shipping source.

Version
1.1.0
Distribution
Encrypted Binary
Listen Port
5300 UDP

Built for operators, not datacenters.

Industrial-track positioning: deployable artifact, documented tradeoffs, and a validation harness—optimized for single-seat macOS workflows.

Local Rules First

Hosts-style A/AAAA overrides with hot reload and live query telemetry.

Encrypted Upstream

DoH, DoT, and dual-stack UDP with failover across resolver targets.

Binary-Only Channel

Protected encrypted artifacts. No Swift source ships to operators.

macOS Native

Menu bar resident service with optional port 53 pf redirect.

Data plane, jazzed up.


   [macOS apps] --UDP-->  +------------------+
                          |   DNSEngine      |
                          |  RulesIndex O(1) |
                          +--------+---------+
                                   |
                     +-------------+-------------+
                     | local hit   | miss        |
                     v             v             v
               [A/AAAA answer]  [DoH/DoT/UDP upstream]
                     |
               [Query log / menu bar UI]

Loopback DNS stays classic UDP. Upstream legs encrypt via DoH or DoT. Default listen port is 5300 with optional pf redirect from port 53.

Install in four beats.

Homebrew tap → trust → install. Binary-only payload.

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
brew tap shyamalschandra/tap
brew trust --tap shyamalschandra/tap
brew install dns-server-mos
Launch with open "$(brew --prefix dns-server-mos)/MenuBarDNS.app", add 127.0.0.1 to macOS DNS, then enable the port 53 redirect in Settings.

Protected release integrity.

Public artifacts exposed for Homebrew verification. Repository source remains private; only encrypted binaries and tap metadata are published here.

Encrypted Binary

Artifact
dns-server-mos-1.1.0-arm64.enc
Architecture
arm64
SHA-256
59809e12dd6f04c2ef929771f29b3dc74ecbe08354615e81925aeb238cbf70ee
Download .encmanifest.json

Public Homebrew Files

Homebrew downloads the encrypted artifact, verifies SHA-256, decrypts at install time, and places dns-server-mos plus MenuBarDNS.app.

Industrial paper preview.

IEEE-style industrial-track design paper for dns-server-mos. Download or read inline below.