Back to Free Tools
FREE TOOLS
SPF DNS Lookup Budget Analyzer
Analyze a supplied SPF record graph for DNS-term bounds, missing records and cycles.
Supplied domain/SPF map JSON, Root domain
spf-dns-lookup-budget-analyzer.json (complete report)
Browser only
Runs locally in your browser. Your files, pasted content and generated output are not uploaded. Reset clears this tool’s working data.
This tool needs JavaScript. If it does not load, refresh the page and try again.
How to use this tool
- Enter values using the examples, or choose a local file where requested. Follow the displayed supported input shapes and limits.
- Choose Calculate result and inspect the complete result.
- Download result to save the primary file. Where supplied, additional links save source files and the full JSON report. Reset restores examples and clears output.
Examples
Supplied domain/SPF map JSON: {"example.com":"v=spf1 include:_spf.example.net -all","_spf.example.net":"v=spf1 ip4:192.0.2.0/24 -all"}
Root domain: example.com
Limitations
- Offline SPFv1 supplied domain-to-record map. Count reachable include,a,mx,ptr,exists and redirect terms recursively,including repeated DAG visits. Stop mechanisms at any qualified all and ignore redirect in that record;child all does not stop its parent. Exp/unknown modifiers are opaque nonbudget data;unknown modifiers may repeat,redirect/exp may not. Mechanisms support qualifiers,strict IPv4/IPv6 and a/mx dual CIDRs. Require explicit ASCII dotted targets for DNS-causing domain arguments;no macro expansion. Normalize root/map/edge domains using the ASCII DNS-name profile;reject ambiguous keys and malformed supplied records. Missing SPF records or active-path cycles return null for the incomplete bound/threshold flag,with deduplicated sorted missing domains and directed cycle paths. Complete finite estimates above10 flag potential term-budget excess,not actual sender-path failure. This conservative structural upper estimate is not exact DNS wire requests,void/MX/PTR-query limits,SPF authorization,macro validation or flattening. No DNS requests. At most100 domains/10000 parsed terms/10000 expanded mechanism-or-redirect steps/1000 cycle paths/1MiB diagnostic domain text and shared input/output limits.
- Text fields are limited to100,000 UTF16 units each and400,000 combined UTF8 bytes; file fields have their own displayed limits. Combined output is at most4MiB. Processing stops after30 seconds; tool-specific bounds may be tighter.
- Generated source is a downloadable result and is not executed here. Inspection does not establish remote behavior, trust or standards certification.
Related tools
No items found.