Chronos-DNS: Distributed Zero-Trust Fabric for Encrypted DNS Auditing

Chronos-DNS is a distributed, production-grade telemetry fabric designed to continuously collect, store, and visualize latency and reliability metrics for legacy (UDP 53) and encrypted DNS transport protocols (DNS-over-HTTPS and DNS-over-TLS). Designed to investigate the transport-layer and cryptographic handshake performance overheads of global public resolvers, the architecture features a non-blocking asynchronous ingest engine and a hardened zero-trust network ingress topology. ### Key Features * **Asynchronous Ingest core:** Leverages Python's `asyncio` event loop and FastAPI to manage hundreds of concurrent TCP/TLS connections without OS context-switching degradation. * **Zero-Inbound Security Perimeter:** Fully isolated EC2 measurement nodes utilizing outbound-only Cloudflare Tunnels (`cloudflared`) to expose visual dashboards securely without opening inbound firewall ports. * **Serverless Analytics Ingestion:** Persists dimensional telemetry and cryptographic certificate lifecycles to Neon Cloud PostgreSQL for analytics. * **Time-Series Monitoring:** Pull-based metrics collection via Prometheus, combined with Grafana dashboards to render latency heatmaps and connection success rates. * **GitOps CI/CD Pipeline:** Fully containerized builds pushed to GitHub Container Registry (GHCR) and automatically deployed via GitHub Actions and Ansible. The empirical findings from this measurement framework are published on Zenodo (CERN) as a graduate research proposal and technical specification report.