16–17 May 2026 Workshop
Edinburgh International Conference Centre
Europe/London timezone

Gonemaster - A Go implementation of Zonemaster

17 May 2026, 12:05
15m
Tinto and Moorfoot (Edinburgh International Conference Centre)

Tinto and Moorfoot

Edinburgh International Conference Centre

The Exchange Edinburgh EH3 8EE Scotland
In-Person Standard Presentation Main Session OARC 46 Day 2

Speaker

Mr Patrik Wallström (Cparta Cyber Defense)

Description

Gonemaster is a Go implementation of Zonemaster that began life as a near 1:1 port of the original software—and then evolved into something that is purpose-built for modern, large-scale DNS measurement work.

At its core, Gonemaster provides robust tests of DNS delegation quality, helping operators and researchers identify misconfigurations and edge cases that impact resolution, availability, and DNS correctness. While preserving the intent and coverage of the upstream test suite, the Go-based approach brings two immediate advantages: significantly faster execution and fewer external software dependencies, making it easier to deploy in constrained environments and simpler to run reproducibly across diverse platforms.

A key design goal has been scalability. Gonemaster’s architecture is particularly well-suited for running large batches of tests—from routine monitoring of portfolios of zones, to broad measurement campaigns where throughput, predictability, and operational simplicity matter as much as test accuracy. This enables new workflows where delegation testing can move from “one domain at a time” troubleshooting into continuous, automated, and data-driven practice.

Just as importantly, Gonemaster formalizes the log output into a structure that is far more suitable for downstream analysis. A complete list of test specifications—including the emitted tags with harmonized arguments—makes it straightforward to correlate results across domains, compare runs over time, and build tooling that can slice measurement data by delegation patterns, failure modes, and test semantics. In practice, this reduces the friction between “running tests” and “learning from results,” making analysis substantially easier than it has been previously.

This talk will cover Gonemaster’s evolution from port to platform: architectural choices, performance considerations, batching at scale, and how formalized output unlocks richer measurement pipelines for DNS operations and research.

Summary

Gonemaster is a Go implementation of Zonemaster that started as a 1:1 port but has evolved into a fast, low-dependency platform for robust testing of DNS delegation quality at scale. By leveraging a new architecture optimized for throughput, it is well suited for running large batches of tests in operational monitoring or measurement campaigns. Gonemaster also formalizes its log output for machine-friendly analysis, and publishes a complete set of test specifications with emitted tags and harmonized arguments, making it easy to correlate results across domains and runs and to build richer analytics pipelines than was practical before.

Talk duration 10 Minutes (+5 for Q&A)
Other conferences? No

Primary author

Mr Patrik Wallström (Cparta Cyber Defense)

Presentation materials

There are no materials yet.