Life & fun · alternatives · 2026
24 alternatives to DNS rebinding protection for Express.js
Express.js middleware for "Host" and "Referer" header validation to protect against DNS rebinding attacks. - brannondorsey/host-validation
This is DNS rebinding protection middleware for Express.js web applications. It helps developers prevent DNS rebinding attacks by validating that incoming requests match expected hostnames. The middleware is designed… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier. DNS rebinding protection for Express.js launched in 2018; newer entries below may have overtaken it.
- 1
A front-end JavaScript toolkit for creating DNS rebinding attacks. - brannondorsey/dns-rebind-toolkit
2018 · github.com · its alternatives →
- 2
NextDNS protects you from all kinds of security threats, blocks ads and trackers on websites and in apps and provides a safe and supervised Internet for kids — on all devices and on all networks.
2019 · nextdns.io · its alternatives →
- 3
Powerful server for Node.js that just works so you can focus on your awesome project
2017 · serverjs.io · its alternatives →
- 4
- 5WD
2020 · which.nameserve.rs · its alternatives →
- 6
I built a DNS resolver that lets me use https://frontend.numa instead of localhost:5173 — auto-generated TLS certs, WebSocket passthrough, path routing. No mkcert, no nginx, no /etc/hosts.
Apr 2026 · github.com · its alternatives →
- 7AA
We launched an API for custom hostnames today. A simple HTTP post with a hostname gets a temp hostname with CNAME/a record instructions, as soon as DNS is setup we issue SSL and start accepting traffic for that hostname. It's the quickest way we know of to provision custom hostnames: https://fly.io/mix/custom-hostnames/ When we started building Fly, we figured it was too late to "make SSL easy and the customers will come". Lets Encrypt changed the world, and we knew many companies rolling their own SSL support with nginx, Traefik, etc, etc. It seemed like a…
2017 · its alternatives →
- 8
A simple API for custom hostnames, handles DNS, SSL, etc.
2017 · fly.io · its alternatives →
- 9RD
2017 · recdnsfp.github.io · its alternatives →
- 10
A DNS client in Go that supports Google DNS over HTTPS - pforemski/dingo
2016 · github.com · its alternatives →
- 11OH
2017 · onehostname.com · its alternatives →
- 12DD
2013 · samarudge.github.io · its alternatives →
- 13
Local development with .local domains and HTTPSfree tier, from $8/mo▲84Hi HN! I'm Jarek, and I've built this tool that allows publishing .local domains on the local network using mDNS. It also has a reverse proxy that handles HTTPS termination and port forwarding. I'm working on adding more features, like an index page with all available domains or allowing proxy redirects, so you could redirect from HTTP to HTTPS. Let me know if you have any questions or feedback!
2023 · localcan.com · its alternatives →
- 14
- 15
MetaShield▲102A chrome extension to keep your ETH & NFTs safe from scams
2021 · chromewebstore.google.com · its alternatives →
- 16
Read this article by Cloudflare this morning https://blog.cloudflare.com/code-mode/ the main argument being that LLMs are much better at writing typescript code than tool calls because they've seen typescript code many more times. HN Discussion: https://news.ycombinator.com/item?id=45399204 https://news.ycombinator.com/item?id=45386248 Deno provides a great sandbox environment for Typescript code execution because of its permissions system which made it easy to spin up code that only has access to fetch and network calls. Stick an MCP proxy…
2025 · github.com · its alternatives →
- 17
I was setting up tests involving DNS resolution recently, where something like 127.0.0.1.service.foo would have been tremendously useful. Back in the day, I'd have used xip.io - but sadly that service died. Well, every excuse is a good one when it comes to writing a DNS server! Backname.io joins nip.io and sslip.io in the wildcard DNS game.
2023 · backname.io · its alternatives →
- 18
Most site blockers work by blacklisting distractions. That never worked for me, the internet is too big, and there’s always something new to waste time on. I wanted the opposite: allowlist‑only browsing. Block everything by default, and explicitly allow only what I need. So I built Sinkzone: a local DNS forwarder with two modes: Monitor mode: lets all traffic through, but logs every domain so you can decide what to allow. Focus mode: only allowlisted domains resolve; everything else is blocked (NXDOMAIN). It’s open source, written in Go, and runs locally on macOS, Linux, and Windows. Works a…
2025 · github.com · its alternatives →
- 19SA
2021 · sirendns.com · its alternatives →
- 20
2020 · github.com · its alternatives →
- 21
Protect any origin from CSRF by checking if the Origin/Referer header match the Host header for "unsafe" methods. - csrf-protection-cloudflare-worker.js
2018 · gist.github.com · its alternatives →
- 22ET
- 23
BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
Nov 2025 · github.com · its alternatives →
- 24
Identifying the DNS server used to fulfill an HTTP request
2013 · 5f5.org · its alternatives →
Also compare
- DNS Rebind Toolkit alternatives
- nextdns.io – A Combination of Cloudflare DNS and Pi-Hole alternatives
- Server.js – A modern Express alternative alternatives
- lcl.host alternatives
- Which DNS servers are you pointing to? alternatives
- I built a DNS resolver from scratch in Rust – no DNS libraries alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →