nanoDNS for PS4/PS5

Repository: https://github.com/drakmor/nanoDNS

Discord: https://discord.gg/x2Ppvzwjhm

Minimal PS4/PS5 payload DNS proxy that:

• listens on configurable local IPv4 and IPv6 addresses on port 53
• applies local IPv4 overrides for domains matching shell-style masks
• forwards all other DNS queries to upstream resolvers from /data/nanodns/nanodns.ini
• stores runtime files under /data/nanodns
• writes DNS queries and responses to a log file
• can additionally mirror logs to stdout/klog when debug=1
• supports an exceptions block to bypass local overrides for selected domains
• can bind the listening sockets to specific local IPv4 and IPv6 addresses

Upstream resolvers are tried in the order listed in the config. The payload stops on the first valid response within the configured timeout budget.

💜 Support Development

If you want to support this project, you can donate

• USDT (TRC-20): TKaUGEwMm9KBXzEoiaaKYBX2yCHAKASW3p
• USDT (ERC-20): 0x313dD245dBA957A5560618eA882d08e66aaFb430
• USDC (Solana): 5kv7j2RbUGaSP1kU1cZWj9jHH7d6rfvxmK6YXTYbH4um

Build

export PS5_PAYLOAD_SDK=/opt/ps5-payload-sdk
make

PS4 build:

export PS4_PAYLOAD_SDK=/opt/ps4-payload-sdk
make -f Makefile.ps4

Deploy

make test PS5_HOST=<ps5-ip-or-hostname>

PS4 deploy:

make -f Makefile.ps4 test PS4_HOST=<ps4-ip-or-hostname>

Config

At startup the payload uses the directory /data/nanodns. The config file path is /data/nanodns/nanodns.ini. If the file does not exist, it creates one with defaults:

[general]
log=/data/nanodns/nanodns.log
debug=0
bind=127.0.0.1
bind6=::1

[upstream]
server=1.1.1.1
server=8.8.8.8
server=77.77.88.88
timeout_ms=1500

[overrides]
*.playstation.com=0.0.0.0
*.playstation.com.*=0.0.0.0
playstation.com=0.0.0.0
*.playstation.net=0.0.0.0
*.playstation.net.*=0.0.0.0
*.psndl.net=0.0.0.0
playstation.net=0.0.0.0
psndl.net=0.0.0.0
# *.example.com=192.168.0.10
# exact.host.local=10.0.0.42

[exceptions]
feature.api.playstation.com
*.stun.playstation.net
stun.*.playstation.net
ena.net.playstation.net
post.net.playstation.net
gst.prod.dl.playstation.net
# auth.api.playstation.net
# *.allowed.playstation.net

Override masks use shell-style wildcard matching with *, ?, bracket classes like [abc], ranges like [a-z], and negated classes like [!0-9], for example:

• *.example.com
• api??.test.local
• exact.host.local

debug=0 disables mirrored output to console and klog, but the file specified by log= still receives all requests and responses. The log file is overwritten on each startup.

bind= sets the local IPv4 address used by the IPv4 listening socket. The default is 127.0.0.1. Use bind=0.0.0.0 to listen on all local IPv4 interfaces.

bind6= sets the local IPv6 address used by the IPv6 listening socket. The default is ::1. Use bind6=:: to listen on all local IPv6 interfaces. Use bind6=off to disable the IPv6 listener entirely.

Entries in [upstream] are attempted in order. timeout_ms is the total time budget for trying the configured upstream servers for a single query.

Entries in [exceptions] are also shell-style masks, one per line. If a query matches an exception, it is forwarded to upstream DNS and bypasses all local override rules.