● Beta · Apache 2.0 · self-hosted

DNS, DHCP and IPAM
in one control plane

SpatiumDDI doesn't just configure your DDI servers — it runs them. BIND9, PowerDNS and Kea ship as first-class service containers the control plane owns, and they keep serving even when it doesn't.

Get started View on GitHub

A modern open-source alternative to commercial DDI platforms · linux/amd64 + linux/arm64

Why SpatiumDDI

One source of truth, three surfaces

IPAM tree, DNS zones, DHCP scopes — one UI, one REST API. Hostname changes in IPAM propagate to DNS; reservations propagate to DHCP. No more three-tab reconciliation.

🗂

Hierarchical IPAM

Spaces, blocks and subnets with full IPv4 and IPv6 — EUI-64, random or sequential allocation. Split, merge, resize, find-free, plus a CIDR planner that previews before it commits.

🌐

DNS you actually run

BIND9 or PowerDNS per server group, auto-registering. RFC 2136 dynamic updates, DNSSEC inline signing, split-horizon views, RPZ blocklists and record-level drift detection against the live zone.

🔄

DHCP with real HA

Kea with group-centric high availability — load-balanced or hot-standby, with self-healing peer drift. DHCPv6, prefix delegation, PXE/iPXE boot profiles and a 95-entry option library.

🪟

Agentless Windows & cloud

Point it at existing Windows DCs over WinRM — nothing installed on the Windows side. Cloudflare, Route 53, Azure DNS and Google Cloud DNS are first-class drivers too.

💿

Ships as an OS appliance

Boot one ISO, answer a few prompts, and you're on HTTPS with the full stack in minutes. Atomic A/B upgrades, health-gated rollback, and a fleet view for every node.

🔐

Built for delegation

Group-based RBAC with LDAP, OIDC, SAML, RADIUS and TACACS+. Hand a subnet or a zone to a department without handing over root. Every mutation lands in an append-only audit log.

The interface

Built for people who run networks

Every screen is a REST call underneath — if you can click it, you can automate it.

SpatiumDDI dashboard
Dashboard — utilization heatmap, live activity, service health
IPAM subnet tree
IPAM — space / block / subnet tree with inline pool boundaries
DNS zones and records
DNS — zones, records, views and per-server serial drift
DHCP scopes and leases
DHCP — scopes, pools, reservations and live leases
Install

Two ways to run it

Both give you the whole stack — control plane, workers, and the DNS / DHCP service containers.

💿 OS appliance ISO (recommended)

Debian 13 + embedded k3s. HTTPS in 2–5 minutes, no Docker or Kubernetes setup.

1. Download the ISO from the releases page
2. Boot it on a VM or bare metal
3. Answer the installer wizard
4. Browse to https://<your-ip>

🐳 Docker Compose

The developer-friendly path. Bring your own host.

git clone https://github.com/spatiumddi/spatiumddi
cd spatiumddi
cp .env.example .env   # set POSTGRES_PASSWORD + SECRET_KEY
make build
make migrate
make up

Default login is admin / admin, and it forces a password change on first use. Full walkthrough in Getting Started.

Documentation

Read the details

Browse all documentation