S System ConsoleSECURE ACCESS
Service operational
Restoring secure session…
RESTRICTED ACCESS

Internal System
Secure access gateway.

This page is restricted to authorized personnel. Authentication is required for all administrative actions. Do not sign in on a public device.

IDENTITY CHECKENCRYPTED LINKSESSION GUARD
CONTROL PLANE

DNS Resolution

Custom records take effect immediately without a service reload.

Total records{{ total }}Current filtered result
Enabled{{ enabledCount }}Active records on this page
DoH statusONLINEPRIVATE ENDPOINT
Upstream fallback{{ settings.fallback_enabled ? 'ON' : 'OFF' }}{{ settings.upstream_servers || 'Not configured' }}

DNS records

Discovery source values are sealed at rest and encrypted dynamically when published as TXT. Ordinary custom records remain directly editable.

{{ error }}
Discovery source unavailable: {{ discoveryError }}
StatusNameTypeValueTTLPriorityNotes
Loading records…
No matching records
{{ record.enabled ? 'Active' : 'Disabled' }} {{ record.name }} {{ record.type }} {{ record.value }} {{ record.ttl }}{{ record.priority }}{{ record.notes || '—' }}
MATCH PREVIEW

Match test

Preview which custom record a request would match without querying an upstream.

{{ testResult.matched ? 'Matched' : 'No match' }} {{ testResult.owner }}
{{ record.type }} {{ record.value }}
CLIENT SETUP

Service endpoint

Use this address in a DNS-over-HTTPS compatible system, browser, or client.

DNS RECORD

{{ editingId ? 'Edit record' : 'New record' }}

{{ modalError }}
ENCRYPTED TXT SOURCE

{{ discoveryEditingIndex === null ? 'New discovery source' : 'Edit discovery source' }}

This is the authenticated value before TXT encryption. Saving reseals the private profile; DoH responses continue to publish only encrypted chunks for {{ discoveryProfile.query_name }}.

{{ modalError }}
UPSTREAM

Recursive fallback settings

When no custom name matches, forward the original DNS message to a DoH URL or traditional DNS IP. Up to four upstreams are supported.

{{ modalError }}
REQUEST HISTORY

DNS request logs

{{ logStats.total }}Requests in 24 hours {{ logStats.custom }}Custom matches {{ logStats.upstream }}Upstream resolutions {{ logStats.discovery }}Discovery requests {{ logStats.error }}Errors {{ logStats.avg_ms }} msAverage duration
TimeClient IPMethodQuery nameTypeSourceStatusHTTPRCODEAnswersDurationDetails
Loading logs…
No request records
{{ item.created_at }}{{ item.client_ip }}{{ item.request_method }}{{ item.query_name }} {{ item.query_type === 'UNKNOWN' ? 'Unparsed' : item.query_type }}{{ sourceLabel(item.source) }} {{ item.status }}{{ item.http_status }}{{ item.rcode === null ? '—' : item.rcode }}{{ item.answer_count }}{{ item.response_time_ms }} ms
View metadata
{{ formatDiagnostic(item.diagnostic) }}
—
{{ logTotal }} total{{ logPage }} / {{ logPages }}
SECURITY HISTORY

Security and audit logs

Records successful and failed sign-ins, rate-limit blocks, and administrative changes. Passwords, verification codes, and tokens are never logged.

TimeAccountClient IPResultReasonUser-Agent
Loading security logs…
No sign-in records
{{ item.created_at }}{{ item.username || '-' }}{{ item.client_ip }} {{ item.success ? 'Success' : 'Failed' }}{{ item.reason }}{{ item.user_agent || '-' }}
TimeAdministratorClient IPActionObjectDescriptionDetails
Loading audit logs…
No audit records
{{ item.created_at }}{{ item.admin_username || '-' }}{{ item.client_ip }}{{ item.action }} {{ item.target_type }} #{{ item.target_id }}{{ item.summary || '-' }}{{ formatMetadata(item.metadata) }}
{{ securityLogTotal }} total{{ securityLogPage }} / {{ securityLogPages }}
ACCOUNT SECURITY

Account security

A successful update revokes all sessions for this administrator. Sign in again with the new credentials.

{{ modalError }}