// IPSonic MONITORING TOOLKIT / DOCUMENTATION
ipsonic-probe rainbow unicorn

ipsonic-probe ✦

YAML-driven infrastructure validation. Platform-agnostic checks. Zero cloud dependencies.

DNSTCPHTTP / TLSYAML CONFIGCLI FIRSTKISSOFFLINE READY

Part of the ipsonic project ↗ Visit the main website

DNSSEC publication metadata

103-dnssec-record-publication.yaml

DNS

What this example does

DNS infrastructure verification: DNSSEC publication metadata. It helps detect resolution, delegation or published-record problems.

Checks and behavior

  • Queries DNS records or resolver behavior ([{'type': 'DNSKEY', 'exists': True}, {'type': 'RRSIG', 'exists': True}]).
  • Formats results for checkmk output.

Adapt example domains, addresses, credentials and thresholds to your environment before use. DNSSEC records and AD flags do not independently verify the cryptographic chain.

YAML configuration

Download original YAML

# Copyright (c) 2026 mati peterson. Maintainer: mati peterson <ipsonic@mailbox.org>. Project: https://ipsonic.com/probe/. Disclaimer: Provided AS IS, without warranty of any kind. Use at your own risk; validate checks and configurations before production use.
# SecOps metadata check: records present; NOT cryptographic DNSSEC validation.
# DS is published in the parent zone; inspect deployment topology before use.
name: "DNSSEC publication metadata"
dns:
  name: example.com
  dnssec: true
  records:
    - type: DNSKEY
      exists: true
    - type: RRSIG
      exists: true
monitoring:
  service_name: "DNSSEC Publication Metadata"
  output: checkmk
  on_failure: warning