// IPSonic MONITORING TOOLKIT / DOCUMENTATION
ipsonic-probe rainbow unicorn

ipsonic-probe ✦

YAML-driven infrastructure validation. Platform-agnostic checks. Zero cloud dependencies.

DNSTCPHTTP / TLSYAML CONFIGCLI FIRSTKISSOFFLINE READY

Part of the ipsonic project ↗ Visit the main website

DNSSEC metadata (not cryptographic verification)

65-dns-dnssec.yaml

DNS

What this example does

DNS infrastructure verification: DNSSEC metadata (not cryptographic verification). It helps detect resolution, delegation or published-record problems.

Checks and behavior

  • Queries DNS records or resolver behavior ([{'type': 'DNSKEY', 'exists': True}, {'type': 'RRSIG', 'exists': True}, {'type': 'DS', 'exists': False}]).
  • Formats results for checkmk output.

Adapt example domains, addresses, credentials and thresholds to your environment before use. DNSSEC records and AD flags do not independently verify the cryptographic chain.

YAML configuration

Download original YAML

# Copyright (c) 2026 mati peterson. Maintainer: mati peterson <ipsonic@mailbox.org>. Project: https://ipsonic.com/probe/. Disclaimer: Provided AS IS, without warranty of any kind. Use at your own risk; validate checks and configurations before production use.
name: DNSSEC metadata (not cryptographic verification)
dns:
  name: example.com
  dnssec: true
  records:
    - type: DNSKEY
      exists: true
    - type: RRSIG
      exists: true
    - type: DS
      exists: false
monitoring:
  output: checkmk
  on_failure: warning