// IPSonic MONITORING TOOLKIT / DOCUMENTATION
ipsonic-probe rainbow unicorn

ipsonic-probe ✦

YAML-driven infrastructure validation. Platform-agnostic checks. Zero cloud dependencies.

DNSTCPHTTP / TLSYAML CONFIGCLI FIRSTKISSOFFLINE READY

Part of the ipsonic project ↗ Visit the main website

Trusted resolver AD flag check

80-dns-ad-flag.yaml

DNS

What this example does

DNS infrastructure verification: Trusted resolver AD flag check. It helps detect resolution, delegation or published-record problems.

Checks and behavior

  • Queries DNS records or resolver behavior ([{'type': 'A', 'exists': True}]).
  • Formats results for icinga2 output.

Adapt example domains, addresses, credentials and thresholds to your environment before use. DNSSEC records and AD flags do not independently verify the cryptographic chain.

YAML configuration

Download original YAML

# Copyright (c) 2026 mati peterson. Maintainer: mati peterson <ipsonic@mailbox.org>. Project: https://ipsonic.com/probe/. Disclaimer: Provided AS IS, without warranty of any kind. Use at your own risk; validate checks and configurations before production use.
# Example template: replace example.com and documentation IPs before use.
name: Trusted resolver AD flag check
dns:
  name: example.com
  nameserver: 192.0.2.53
  dnssec: true
  authenticated_data: true
  records:
  - type: A
    exists: true
monitoring:
  output: icinga2
  assertions:
  - id: dns.a.dnssec_ad
    severity: warning