# dns-update
[](https://crates.io/crates/dns-update)
[](https://docs.rs/dns-update)
[](http://www.apache.org/licenses/LICENSE-2.0)
_dns-update_ is an **Dynamic DNS update library** for Rust that supports updating DNS records using the [RFC 2136](https://datatracker.ietf.org/doc/html/rfc2136) protocol
and over 70 cloud, registrar, and self-hosted DNS provider APIs. It was designed to be simple and easy to use, while providing a high level of flexibility and performance.
## Supported providers
| [RFC 2136](https://datatracker.ietf.org/doc/html/rfc2136) | `new_rfc2136_tsig` | TSIG authentication |
| [Alibaba Cloud DNS](https://www.alibabacloud.com/product/dns) | `new_alidns` | ACS3-HMAC-SHA256 |
| [ArvanCloud](https://www.arvancloud.ir/) | `new_arvancloud` | |
| [AutoDNS](https://www.internetx.com/) | `new_autodns` | InterNetX |
| [Azure DNS](https://azure.microsoft.com/services/dns/) | `new_azuredns` | OAuth2 client credentials |
| [Baidu Cloud DNS](https://cloud.baidu.com/product/dns) | `new_baiducloud` | BCE-Auth-V1 |
| [BlueCat Address Manager v2](https://www.bluecatnetworks.com/) | `new_bluecatv2` | OAuth |
| [Bunny DNS](https://bunny.net/dns/) | `new_bunny` | |
| [Cloudflare](https://www.cloudflare.com/) | `new_cloudflare` | API token or X-Auth-* |
| [ClouDNS](https://www.cloudns.net/) | `new_cloudns` | |
| [Constellix](https://constellix.com/) | `new_constellix` | HMAC-SHA1 |
| [cPanel](https://cpanel.net/) | `new_cpanel` | UAPI, API token |
| [DDNSS.de](https://ddnss.de/) | `new_ddnss` | TXT only |
| [deSEC](https://desec.io/) | `new_desec` | |
| [DigitalOcean](https://www.digitalocean.com/products/networking/dns) | `new_digitalocean` | |
| [DNSimple](https://dnsimple.com/) | `new_dnsimple` | |
| [DNS Made Easy](https://dnsmadeeasy.com/) | `new_dnsmadeeasy` | HMAC-SHA1 |
| [Domeneshop](https://domene.shop/) | `new_domeneshop` | |
| [DreamHost](https://www.dreamhost.com/) | `new_dreamhost` | |
| [DuckDNS](https://www.duckdns.org/) | `new_duckdns` | TXT only |
| [Dynu](https://www.dynu.com/) | `new_dynu` | |
| [EasyDNS](https://www.easydns.com/) | `new_easydns` | |
| [Akamai Edge DNS](https://www.akamai.com/products/edge-dns) | `new_edgedns` | EG1-HMAC-SHA256 |
| [Exoscale](https://www.exoscale.com/) | `new_exoscale` | EXO2-HMAC-SHA256 |
| [FreeMyIP](https://freemyip.com/) | `new_freemyip` | TXT only |
| [Gandi v5](https://www.gandi.net/) | `new_gandiv5` | LiveDNS |
| [Gcore](https://gcore.com/dns) | `new_gcore` | |
| [GleSYS](https://glesys.com/) | `new_glesys` | |
| [GoDaddy](https://www.godaddy.com/) | `new_godaddy` | |
| [Google Cloud DNS](https://cloud.google.com/dns) | `new_google_cloud_dns` | Service account JWT |
| [Hetzner DNS](https://www.hetzner.com/dns-console) | `new_hetzner` | |
| [hosting.de](https://www.hosting.de/) | `new_hostingde` | |
| [Hostinger](https://www.hostinger.com/) | `new_hostinger` | |
| [Huawei Cloud DNS](https://www.huaweicloud.com/) | `new_huaweicloud` | SDK-HMAC-SHA256 |
| [Hurricane Electric](https://dns.he.net/) | `new_hurricane` | TXT only |
| [IBM Cloud (SoftLayer)](https://www.ibm.com/cloud/) | `new_ibmcloud` | Classic Infrastructure |
| [Infoblox NIOS](https://www.infoblox.com/) | `new_infoblox` | WAPI |
| [Infomaniak](https://www.infomaniak.com/) | `new_infomaniak` | |
| [INWX](https://www.inwx.com/) | `new_inwx` | JSON-RPC |
| [IONOS](https://www.ionos.com/) | `new_ionos` | |
| [IPv64](https://ipv64.net/) | `new_ipv64` | TXT only |
| [Joker](https://joker.com/) | `new_joker` | DMAPI, API key or username/password |
| [AWS Lightsail](https://aws.amazon.com/lightsail/) | `new_lightsail` | AWS Sigv4 |
| [Linode](https://www.linode.com/) | `new_linode` | |
| [LuaDNS](https://www.luadns.com/) | `new_luadns` | |
| [Mythic Beasts](https://www.mythic-beasts.com/) | `new_mythicbeasts` | OAuth2 |
| [Namecheap](https://www.namecheap.com/) | `new_namecheap` | XML API |
| [Name.com](https://www.name.com/) | `new_namedotcom` | |
| [NameSilo](https://www.namesilo.com/) | `new_namesilo` | XML API |
| [netcup](https://www.netcup.com/) | `new_netcup` | JSON-RPC, session cache |
| [Netlify](https://www.netlify.com/) | `new_netlify` | |
| [Nifcloud](https://pfs.nifcloud.com/) | `new_nifcloud` | NIFTY3-HTTPS |
| [NS1](https://ns1.com/) | `new_ns1` | |
| [Oracle Cloud DNS](https://www.oracle.com/cloud/networking/dns/) | `new_oraclecloud` | RSA-SHA256 HTTP Signatures |
| [OVH](https://www.ovh.com/) | `new_ovh` | |
| [Plesk](https://www.plesk.com/) | `new_plesk` | REST API, X-API-Key |
| [Porkbun](https://porkbun.com/) | `new_porkbun` | |
| [AWS Route 53](https://aws.amazon.com/route53/) | `new_route53` | AWS Sigv4 |
| [ANS SafeDNS](https://www.ans.co.uk/) | `new_safedns` | |
| [Scaleway](https://www.scaleway.com/) | `new_scaleway` | |
| [Spaceship](https://www.spaceship.com/) | `new_spaceship` | |
| [Tencent Cloud DNSPod](https://cloud.tencent.com/product/dns) | `new_tencentcloud` | TC3-HMAC-SHA256 |
| [TransIP](https://www.transip.eu/) | `new_transip` | RSA-SHA512 JWT |
| [UltraDNS](https://vercara.com/authoritative-dns) | `new_ultradns` | OAuth2 |
| [Vercel](https://vercel.com/) | `new_vercel` | |
| [Volcano Engine](https://www.volcengine.com/) | `new_volcengine` | HMAC-SHA256 |
| [Vultr](https://www.vultr.com/) | `new_vultr` | |
| [Websupport](https://www.websupport.sk/) | `new_websupport` | HMAC-SHA1 |
| [Yandex Cloud DNS](https://cloud.yandex.com/services/dns) | `new_yandexcloud` | PS256 JWT |
## API
Every provider exposes three RRSet-oriented methods on `DnsUpdater`. All three operate on the full RRSet at `(name, type)` and are idempotent.
```rust,ignore
async fn set_rrset(name, type, ttl, records: Vec<DnsRecord>, origin) -> Result<()>
async fn add_to_rrset(name, type, ttl, records: Vec<DnsRecord>, origin) -> Result<()>
async fn remove_from_rrset(name, type, records: Vec<DnsRecord>, origin) -> Result<()>
```
- `set_rrset` replaces the RRSet at `(name, type)` with exactly `records`.
An empty `Vec` deletes the RRSet. Other types at the same owner are
never touched.
- `add_to_rrset` ensures `records` are present at the owner without
removing anything else.
- `remove_from_rrset` removes only the listed values; other values at the
same owner are preserved.
## Usage Example
Publishing a TXT record using RFC 2136 over TSIG:
```rust,ignore
let client = DnsUpdater::new_rfc2136_tsig(
"tcp://127.0.0.1:53",
"<KEY_NAME>",
STANDARD.decode("<TSIG_KEY>").unwrap(),
TsigAlgorithm::HmacSha512,
)
.unwrap();
// Publish the entire RRSet at this owner in one atomic operation. Empty
// Vec deletes the RRSet. Rerunning with the same input is a no-op.
client
.set_rrset(
"test._domainkey.example.org",
DnsRecordType::TXT,
300,
vec![DnsRecord::TXT("v=DKIM1; k=rsa; h=sha256; p=test".to_string())],
"example.org",
)
.await
.unwrap();
// Delete the RRSet.
client
.set_rrset(
"test._domainkey.example.org",
DnsRecordType::TXT,
0,
vec![],
"example.org",
)
.await
.unwrap();
```
`add_to_rrset` is for "publish this value alongside whatever else is there"
(e.g. an ACME challenge token that should coexist with the user's DKIM/SPF
TXTs at the same owner):
```rust,ignore
client
.add_to_rrset(
"_acme-challenge.example.org",
DnsRecordType::TXT,
60,
vec![DnsRecord::TXT("challenge-token".to_string())],
"example.org",
)
.await
.unwrap();
client
.remove_from_rrset(
"_acme-challenge.example.org",
DnsRecordType::TXT,
vec![DnsRecord::TXT("challenge-token".to_string())],
"example.org",
)
.await
.unwrap();
```
## License
Licensed under either of
* Apache License, Version 2.0 ([LICENSE-APACHE](LICENSE-APACHE) or http://www.apache.org/licenses/LICENSE-2.0)
* MIT license ([LICENSE-MIT](LICENSE-MIT) or http://opensource.org/licenses/MIT)
at your option.
## Copyright
Copyright (C) 2020, Stalwart Labs LLC