KNJ Panel · Product Roadmap · Updated 2026-07-26
What's live today, what's actively being built, and what's planned — organized by area. DNS & Mail, and Service Configuration are covered in the most detail since they're where we're focused right now; everything else follows by category. This page updates as features ship.
Every domain should get a complete, production-ready zone the moment it's created — not just the bare minimum to resolve.
Every new domain now signs its own outbound mail and publishes proper sender- authorization records automatically — no manual DNS work required:
Next up for a zone: a broader set of service-discovery records (mail client autoconfiguration, calendar/contacts sync) once the underlying services they point to exist — publishing DNS for something that doesn't answer yet would just create confusion, so those are sequenced after the services themselves.
| Feature | What it does | Status | Note |
|---|---|---|---|
| SPF / DKIM / DMARC auto-generation | Sign outbound mail and publish sender-authorization records, per domain, automatically. | Live | Shipped 2026-07-25 — real signing infrastructure, not a placeholder record. |
| Zone manager | Add, edit, delete DNS records per domain. | Live | Shipped 2026-07-26 — edit every record in place and save the whole zone in one click, plus per-type filtering and a DNSSEC toggle. |
| Restore default records | One-click recovery if a zone's records get deleted by accident. | Live | Shipped 2026-07-26 — rebuilds the essentials (nameservers, site, mail, mail authentication) without touching or duplicating anything you've added yourself. |
| Zone creation & deletion | A zone is created/removed automatically with the account. | Live | — |
| Zone templates | Customize the record set every new zone starts with. | Live | — |
| Per-domain mail routing | Choose how mail for a domain is handled — locally or remotely. | Live | Shipped 2026-07-26. |
| Bulk-enable mail signing | Retrofit SPF/DKIM/DMARC onto domains that existed before it became automatic. | Live | Shipped 2026-07-26 — Backfill All or per-domain, from Zone Templates. |
| Nameserver diagnostic report | Check whether a domain's live nameservers actually point here. | Live | — |
| Multiple domains per account | Host more than one domain under a single account. | Live | Shipped 2026-07-26. |
| Orphaned zone cleanup | Find and remove zones with no matching account. | Live | — |
| Zone TTL defaults | Configure default record TTLs and SOA values. | Live | — |
| Domain forwarding | Redirect a domain's traffic to another URL. | Live | — |
| DNSSEC | Sign zones for authenticated DNS responses. | Live | Shipped 2026-07-26 — one-click per zone, DS record shown for the registrar. |
| DNS clustering (secondary nameservers) | Authorize a DNS-only server to replicate zones from this one. | Live | Shipped 2026-07-26 — generates a real TSIG key and BIND config the moment a DNS-only server is added; replication itself uses standard, secure zone transfers. |
| Multi-nameserver sync | Manually re-push every zone to keep a cluster in sync. | Not Planned | A "push now" trigger on top of the clustering above (now live) — better scoped once there's a real secondary to test it against. |
Day-to-day mailbox management, plus the underlying mail server configuration that controls how mail is filtered, relayed, and secured.
Beyond the anti-abuse limits and RBL filtering already live, a full mail configuration surface is planned: spam scoring, sender/recipient access lists, attachment filtering, outbound relay (smarthost) support, and protocol/encryption policy for the mail server itself (which protocols are enabled, minimum TLS version, connection limits).
| Feature | What it does | Status | Note |
|---|---|---|---|
| Mailboxes & forwarders | Create/delete mailboxes, set quota, manage forwarders. | Live | — |
| Anti-abuse limits | Max message size, max recipients, per-client send rate. | Live | — |
| Blocklist filtering | Reject mail from known-bad senders (RBL). | Live | — |
| Spam scoring | Score and act on likely-spam messages. | Live | Shipped 2026-07-26 — SpamAssassin, tag or optionally reject outright at a configurable score. |
| Outbound relay (smarthost) | Route outbound mail through a third-party relay. | Live | Shipped 2026-07-26 — host + optional username/password, own settings page. |
| Mail server protocol/TLS policy | Which protocols are enabled, minimum TLS version, connection limits. | Live | Shipped 2026-07-26 — IMAP/POP3 toggle, IPv6, TLS policy, and process limits, all editable without SSH. |
| Mail queue viewer | View, retry, or clear undelivered messages. | Live | Shipped 2026-07-26 — retry one message or the whole queue, delete one or clear everything. |
| Delivery reports & troubleshooting | Trace why a specific message didn't deliver. | Live | Shipped 2026-07-26 — browse recent activity or search a sender/recipient/domain. |
| Mail statistics | Send volume by domain/account over time. | Live | Shipped 2026-07-26 — sent/deferred/bounced by sender domain, plus a list of authenticated relayers. |
| Inbound filtering by country/domain | Block inbound mail by origin. | Live | Shipped 2026-07-26 — block by sender domain or by country, rejected at the SMTP level. |
| Greylisting | Temporarily defer unrecognized senders to filter spambots. | Live | Shipped 2026-07-26 — filters spam that never retries, without scoring or blocklisting anything. |
| Deliverability checker | Verify SPF/DKIM/DMARC/PTR are all correctly configured for a domain. | Live | Shipped 2026-07-26 — live public DNS lookups, no cached or self-reported state. |
| Autoresponders | Out-of-office style auto-reply per mailbox. | Live | Shipped 2026-07-26 — account-side, one per mailbox. |
| Webmail | In-browser mail client. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Nameserver | Authoritative DNS for hosted domains. | Live | — |
| Mail server configuration | Protocol/SSL/process-limit configuration for the mail server. | Live | Shipped 2026-07-26 — see Email section above. |
| Mail relay & filtering configuration | Full access-list/filter/relay configuration surface. | In Progress | Core anti-abuse settings live; broader configuration planned. |
| FTP accounts | FTP access to a hosting account's files. | Planned | — |
| WebDAV access | Mount a hosting account's files over WebDAV. | Planned | File Manager is live; WebDAV mounting isn't yet. |
| Log rotation | Retention/rotation rules for account log files. | Planned | — |
| Service certificates | TLS certificates for the panel and mail services. | In Progress | The panel's own certificate is managed; per-service certs are next. |
| Service manager | Start/stop/restart individual services from the UI. | Planned | Live status view exists; controls are next. |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Account list | Full account overview with quick actions. | Live | — |
| Create account | Provision a domain, owner, and hosting package. | Live | Username and password generate automatically. |
| Log in as user | Admins/resellers can open a customer's own panel directly. | Live | — |
| Edit account | Modify an account's settings after creation. | Planned | — |
| Bulk account removal | Remove multiple accounts at once. | In Progress | Single-account removal is live. |
| Suspend / unsuspend | Temporarily disable an account without deleting it. | Planned | High priority. |
| Admin password reset | Admin-initiated password reset for an account owner. | Planned | — |
| Quota tracking & enforcement | Disk usage limits per account. | Planned | High priority. |
| Bandwidth tracking & limits | Monthly transfer caps with usage visibility. | Planned | High priority. |
| Package upgrade/downgrade | Change an account's package after creation. | Planned | — |
| Broadcast messaging | Message every account owner on the server. | Planned | — |
| Access log downloads | Download an account's raw web server logs. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Firewall management | Manage firewall rules and banned IPs. | Live | — |
| Brute-force protection | Auto-ban IPs after repeated failed logins. | In Progress | Covers SSH; extending to panel logins directly. |
| Per-service IP allow/deny lists | Restrict which IPs can reach specific services. | Planned | — |
| Two-factor authentication | TOTP-based 2FA for panel logins. | Planned | — |
| Password strength policy | Server-wide minimum password requirements. | In Progress | Enforced per-form today; central policy is next. |
| Security advisor | Automated scan of the server's own configuration. | Planned | — |
| External/OAuth login | Sign in via a third-party identity provider. | Planned | — |
| API tokens | Scoped tokens for automation. | In Progress | Admin-level tokens live; account-level next. |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Automatic certificates | Free certificates, auto-issued and auto-renewed for every domain. | Live | — |
| Custom certificate upload | Install a purchased or custom certificate. | Live | — |
| CSR generation | Generate a certificate signing request. | Planned | — |
| Certificate inventory | Server-wide view of every certificate in use. | Planned | — |
| TLS policy configuration | Server-wide protocol/cipher policy. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Database & user management | Create/delete databases and users, manage grants. | Live | — |
| Visual database browser | Browse and query databases without external tools. | Planned | — |
| Database maintenance tools | Repair, monitor, and manage database engine settings. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Multiple PHP versions | Install and run several PHP versions side by side; each account picks its own. | Live | — |
| Per-account PHP configuration | Customize PHP settings per account. | Live | — |
| PHP extension management | Toggle optional PHP extensions. | Live | Includes one-click ionCube Loader installation. |
| OS package management UI | Install system packages from the panel. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Hosting packages | Define hosting plans with limits and quotas. | Live | — |
| Reseller accounts | Give a reseller their own scoped set of accounts. | In Progress | Scoping is correct; usage/limits dashboard is next. |
| Per-package feature control | Control which panel features a package's accounts can see. | Planned | — |
| Account reassignment | Move an account to a different reseller. | Planned | — |
| Reseller permission levels | Configurable per-reseller access control. | Planned | — |
| Account migration/transfer | Move accounts between servers, import from another host. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| Service status | Live up/down status for every service. | Live | — |
| Automated backups | Scheduled backups with configurable retention. | Planned | High priority. |
| Backup restoration | Restore a full account or individual files. | Planned | — |
| Server information | System resource and hardware summary. | Planned | — |
| Live resource monitoring | Disk usage, running processes, ability to stop runaway processes. | Planned | — |
| Feature | What it does | Status | Note |
|---|---|---|---|
| First-run setup | Guided setup on first login — contact info, domain, certificate. | Live | — |
| Server-wide settings | Web server, PHP, mail, and DNS defaults. | In Progress | Organized by area rather than one long settings page. |
| Server role profiles | Configure a server for a specific role (mail-only, DNS-only, etc). | Planned | — |
| Timezone configuration | — | Planned | — |
| Traffic & visitor statistics | Per-account traffic reporting. | Planned | — |
| Multi-server support | Register and manage additional servers. | In Progress | Foundational data model is in place. |
| Area | What it covers | Status | Note |
|---|---|---|---|
| IP address management | IPv4/IPv6 pools, dedicated IPs per account. | Not Planned | Single shared server IP model today. |
| DNS resolver configuration | The server's own upstream DNS resolvers. | Planned | — |
| Admin notification routing | Who gets alerted on server problems. | Planned | — |
| Server clustering | DNS and configuration clustering across multiple servers. | In Progress | DNS clustering is live (see DNS above). Configuration clustering (account/package sync) is a separate, larger feature for a future release. |
| Remote reboot | Reboot the server from the UI. | Planned | — |
| Multi-language UI | — | Not Planned | English-only for now. |
| Webhooks | Integrate with external systems via webhooks. | Planned | — |
Not everything above — just what we're focused on closing next.
Shipped — every new domain now signs and authenticates its own outbound mail automatically.
A core hosting-panel operation that's currently missing a middle ground between "active" and "fully removed."
Foundational to making hosting packages actually mean something.
Shipped 2026-07-26 — one of the most-requested capabilities for a real hosting account.
Scheduled backup and restore, done properly.
Let account owners actually browse and query their own data.
A meaningful security upgrade for panel logins.
A standard hosting-account expectation.