Product preview

See the Themelio console.

Five screens from the Themelio DDI platform — the same interface your team uses to run DNS, DHCP and IPAM across every site, on your own infrastructure.

Dashboard

System Overview

Live health at a glance — DNS query rate, DHCP lease rate, active leases and node status, with alerts that surface pool pressure and license events before they affect service.

themelio-console · https://themelio.local
Monitoring
System Overview
Search…
ENTERPRISE
DNS Queries / sec
48,210
+6.4% vs 1h
DHCP Leases / sec
1,940
+2.1% vs 1h
Active Leases
38,402
+0.8% vs 1h
Nodes Online
12 / 12
steady
Query rate · last 2 hours48,210 qps
Recent alerts
All systems nominal
Success · just now
Pool 10.30.0.0/23 at 86%
Warning · 4 min ago
MA renewal in 21 days
License · 1 h ago
Top zones by records
corp.example.com4,820
cloud.example.net3,110
svc.internal2,240
10.in-addr.arpa1,980
vpn.example.com640
DHCP pool utilizationwarn ≥85% · crit ≥95%
10.20.0.0/22 dhcp-a74%
10.30.0.0/23 dhcp-a86%
192.168.40.0/24 dhcp-b39%
172.16.10.0/24 dhcp-b58%
Node resource status dns-auth-01 · online
DNS running DHCP running IPAM running NTP running
CPU
34%
CPU
51%
MEM
40%
DISK
Uptime
182 days
Cache hit
94.2%
p99 latency
0.8 ms
Core Services

DNS · DHCP · IPAM in one console

Authoritative and recursive DNS with views, DNSSEC and zone transfer — plus DHCP scopes and IPAM — managed from a single place with validate-before-apply and staged deployment.

themelio-console · https://themelio.local
Core services · DNS
Zones
ENTERPRISE
Zones
128
Records
21,904
Network Views
3
DNSSEC signed
84%
View: All
Search zones…
3 pending changes
ZoneTypeViewRecordsDNSSECNodesStatus
corp.example.comPrimaryinternal4,820 signed3 active
cloud.example.netPrimaryinternal3,110 signed3 active
svc.internalPrimaryinternal2,2402 active
example.comSecondarypublic1,560 signed2 active
10.in-addr.arpaPrimaryinternal1,9802 active
vpn.example.comPrimarypublic640 signed2 active
legacy.example.comSecondarypublic2101 disabled
Showing 7 of 128 zonesPage 1 · 25 / page
High Availability

Active-standby, no single point of failure

Pro · Enterprise

Manager HA with a virtual IP and streaming replication, DHCP HA pairs, and a full failover history — so maintenance and hardware failure never take the network down.

themelio-console · https://themelio.local
Infrastructure · Nodes & HA
High Availability
ENTERPRISE
Manager HA
Active-Standby
healthy
Failover target
< 60 s
VRRP + leader lease
Replication lag
0.4 s
streaming · slot
Virtual IP
10.1.1.10
UI · API · agents
Manager cluster — active / standby Synced · split-brain guarded
Virtual IP 10.1.1.10 keepalived VRRP
Active · Leader online
dns-mgr-01
leader · serving
PostgreSQL · read-write
streaming replicationlag 0.4s
Standby · Replica online
dns-mgr-02
hot-standby · read-only
PostgreSQL · read-only replica
DHCP HA pairsKea HA hook · failover <10s
site-a-dhcpload-balancing synced
dhcp-a1primaryload-balancing
dhcp-a2secondaryload-balancing
site-b-dhcphot-standby degraded
dhcp-b1primaryhot-standby
dhcp-b2standbywaiting
Failover history
Scheduled switchover completed
maker-checker · admin → approved by netlead
2026-07-14 02:14
Standby rejoined after maintenance
verad ha rejoin · pg_basebackup
2026-06-30 09:41
Automatic failover — primary unreachable
VIP moved 3.2s · new leader dns-mgr-02
2026-06-02 23:08
AI Assistant

Ask your network, in plain language

Enterprise

An on-premise MCP server lets your team query DDI state conversationally — read-only by default, every call audited, and nothing ever leaves your network.

themelio-console · https://themelio.local
Infrastructure · AI Assistant
Ask Themelio PREVIEW
MCP connectedENTERPRISE
Which subnets are above 85% utilization, and what should I do?
Two pools are above your 85% threshold. Both are DHCP dynamic ranges — the guest network is the more urgent:
10.30.0.0/23Guest
92%
10.20.0.0/22Corp data
87%
Suggested action: extend 10.30.0.0/23 or shorten its lease time from 24h to 8h to recycle addresses faster.
Read from IPAM · DHCP utilization · logged to audit trail
Why did the last deploy of corp.example.com fail?
named-checkconf rejected changeset #4821: an apex NS record points to ns3.corp.example.com which has no matching glue A record.
The change was rolled back automatically, so the zone is still serving the previous version. Add the glue record for ns3 and re-deploy.
No outage — automatic rollback kept the last-good config
to send
Try asking
Which subnets are above 85% utilization?
Who held 10.20.0.88 yesterday at 3pm?
Draft an A record for app-07 in corp.example.com
Explain the last failed deployment
Top 10 NXDOMAIN domains this week
Built for on-prem trust
Read-only by default
Writes go through change review
No data leaves your network
MCP server runs on-prem
Every call audited
Same RBAC + audit trail
Connect your own AI client over the Model Context Protocol. Themelio never calls out to the internet.
Reports & Analytics

Query analytics and compliance reporting

Pro · Enterprise

Understand who is asking for what: top talkers, top domains, query mix and blocked threats — plus scheduled compliance and audit reports your auditor can read.

themelio-console · https://themelio.local
Monitoring · Analytics
Reports & Analytics
Last 24 hours
Export PDF
ENTERPRISE
Queries (24h)
4.16 B
+5.2% vs prev. day
Unique clients
12,847
+1.9% vs prev. day
Blocked (RPZ)
68,204
-12.4% vs prev. day
Avg resolve
0.9 ms
-3.1% vs prev. day
Query volume · hourly (last 24h) peak hours
Query type mix
4.16Bqueries / 24h
A52%
AAAA26%
PTR11%
HTTPS6%
TXT/other5%
Top talkers — clients by queries all clients
10.20.4.17 eng-ws-1421,284,500
10.20.4.63 build-runner-3942,100
10.30.1.9 voip-gw-01806,400
10.20.7.201 kiosk-lobby611,900
10.40.0.5 cctv-nvr-2503,700
10.20.2.88 hr-laptop-27388,200
Top queried domainscloudcdntelemetryinternal
graph.microsoft.com2,140,000
update.googleapis.com1,760,000
prod.cdn.example.net1,205,000
telemetry.vendor.io812,000
s3.ap-southeast-1.aws690,000
ntp.pool.internal402,000
Saved & scheduled reports Export all · PDF / CSV
Compliance — Query Log Retention
Regulatory retention policy · 730-day archive
Scheduled · monthly
DHCP Lease History & Utilization
Per-scope allocation, churn, exhaustion trend
On demand
Audit & Change Report
Who changed what, per zone / scope / user
Scheduled · weekly
Security — Blocked & Threat Feed
RPZ hits, DGA detections, top blocked clients
On demand
About these screens. Interface previews with representative sample data. Everything shown runs entirely on your own infrastructure — Themelio never calls home.