trust-dns 0.4.0

TRust-DNS is meant to be a drop in replacement for BIND9, and be a safe and secure DNS server and client

trust-dns Build Status

A Rust based DNS client and server, built to be safe and secure from the ground up.


  • Build a safe and secure DNS server and client with modern features.
  • No panics, all code is guarded
  • Use only safe Rust, and avoid all panics with proper Error handling
  • Use only stable Rust
  • Protect against DDOS attacks (to a degree)
  • Support options for Global Load Balancing functions
  • Make it dead simple to operate


WARNING!!! Under active development!

The client now supports timeouts (thanks mio!). Currently hardcoded to 5 seconds, I'll make this configurable if people ask for that, but this allows me to move on.

The server code is complete, the daemon currently only supports IPv4. Master file parsing is complete and supported. There is currently no forking option, and the server is not yet threaded.

RFC's implemented

RFC's in progress or not yet implemented


This assumes that you have Rust stable installed. These presume that the trust-dns repos have already been synced to the local system:

$ git clone
$ cd trust-dns


  • Unit tests

    These are good for running on local systems. They will create sockets for local tests, but will not attempt to access remote systems.

    $ cargo test
  • Functional tests

    These will try to use some local system tools for compatibility testing, and also make some remote requests to verify compatibility with other DNS systems. These can not currently be run on Travis for example.

    $ cargo test --features=ftest
  • Benchmarks

    Waiting on benchmarks to stabilize in mainline Rust.


  • Production build

    $ cargo build --release


Warning: Trust-DNS is still under development, running in production is not recommended. The server is currently only single-threaded, it is non-blocking so this should allow it to work with most internal loads.

  • Verify the version

    $ target/release/named --version
  • Get help

    $ target/release/named --help


  • Why are you building another DNS server?

    Because I've gotten tired of seeing the security advisories out there for BIND. Using Rust semantics it should be possible to develop a high performance and safe DNS Server that is more resilient to attacks.