ADVERT
🛡️ IPSECKEY Record Checker
Check IPSECKEY records that distribute public keys for IPsec security associations and VPN discovery.
IPSECKEY Record Checker
Inspect IPsec public keys advertised in DNS to streamline VPN peer discovery and validation.
What you'll see
- Gateway type, precedence, and algorithm values for each IPSECKEY entry.
- Base64-encoded public keys that devices use to establish secure tunnels.
- TTL information indicating how quickly new keys will propagate to clients.
Common use cases
- Audit opportunistic IPsec deployments that rely on DNS for key distribution.
- Verify that rotated VPN keys are published before pushing new configurations to endpoints.
- Document gateway assignments when multiple tunnels share the same hostname.
DNS Resolver
Check IPSECKEY records that hold public keys for IPsec security associations and VPN discovery.
Prepared query:
example.comTroubleshooting tips
- Ensure gateway hostnames also resolve to valid A or AAAA records so peers can reach them.
- Use unique precedence values when publishing multiple keys to control which one clients prefer.
- Refresh keys regularly—shorter TTLs help you roll credentials quickly if a compromise occurs.
FAQ
- Which algorithms are supported?
- Most resolvers expect RSA or elliptic-curve keys. The algorithm field reveals whether you're publishing a compatible option for your devices.
- Do I still need certificates?
- IPSECKEY records supplement, but do not replace, certificate-based authentication. Use them to automate discovery while keeping device policies enforced.
ADVERT
ADVERT