#[non_exhaustive]pub struct Config {Show 22 fields
pub host: String,
pub port: u16,
pub database: Option<String>,
pub credentials: Credentials,
pub tls: TlsConfig,
pub application_name: String,
pub connect_timeout: Duration,
pub command_timeout: Duration,
pub packet_size: u16,
pub strict_mode: bool,
pub trust_server_certificate: bool,
pub instance: Option<String>,
pub mars: bool,
pub encrypt: bool,
pub no_tls: bool,
pub redirect: RedirectConfig,
pub retry: RetryPolicy,
pub timeouts: TimeoutConfig,
pub tds_version: TdsVersion,
pub application_intent: ApplicationIntent,
pub workstation_id: Option<String>,
pub language: Option<String>,
}Expand description
Configuration for connecting to SQL Server.
This struct is marked #[non_exhaustive] to allow adding new fields
in future releases without breaking semver. Use Config::default()
or Config::from_connection_string() to construct instances.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.host: StringServer hostname or IP address.
port: u16Server port (default: 1433).
database: Option<String>Database name.
credentials: CredentialsAuthentication credentials.
tls: TlsConfigTLS configuration (only available when tls feature is enabled).
application_name: StringApplication name (shown in SQL Server management tools).
connect_timeout: DurationConnection timeout.
command_timeout: DurationCommand timeout.
packet_size: u16TDS packet size.
strict_mode: boolWhether to use TDS 8.0 strict mode.
trust_server_certificate: boolWhether to trust the server certificate.
instance: Option<String>Instance name (for named instances).
mars: boolWhether to enable MARS (Multiple Active Result Sets).
encrypt: boolWhether to require encryption (TLS). When true, the connection will use TLS even if the server doesn’t require it. When false, encryption is used only if the server requires it.
no_tls: boolDisable TLS entirely and connect with plaintext.
⚠️ SECURITY WARNING: This completely disables TLS/SSL encryption. Credentials and data will be transmitted in plaintext. Only use this for development/testing on trusted networks with legacy SQL Server instances that don’t support modern TLS versions.
This option exists for compatibility with legacy SQL Server versions (2008 and earlier) that may only support TLS 1.0/1.1, which modern TLS libraries (like rustls) don’t support for security reasons.
When true:
- Overrides the
encryptsetting - Sends
ENCRYPT_NOT_SUPin PreLogin - No TLS handshake occurs
- All traffic including login credentials is unencrypted
Do not use in production without understanding the security implications.
redirect: RedirectConfigRedirect handling configuration (for Azure SQL).
retry: RetryPolicyRetry policy for transient error handling.
timeouts: TimeoutConfigTimeout configuration for various connection phases.
tds_version: TdsVersionRequested TDS protocol version.
This specifies which TDS protocol version to request during connection. The server may negotiate a lower version if it doesn’t support the requested version.
Supported versions:
TdsVersion::V7_3A- SQL Server 2008TdsVersion::V7_3B- SQL Server 2008 R2TdsVersion::V7_4- SQL Server 2012+ (default)TdsVersion::V8_0- SQL Server 2022+ strict mode (requiresstrict_mode = true)
Note: When strict_mode is enabled, this is ignored and TDS 8.0 is used.
application_intent: ApplicationIntentApplication workload intent for AlwaysOn Availability Group routing.
When set to ApplicationIntent::ReadOnly, SQL Server routes the
connection to a readable secondary replica. Sent in LOGIN7 TypeFlags
as the READONLY_INTENT bit.
workstation_id: Option<String>Client workstation name sent to SQL Server in the LOGIN7 HostName field.
Used for auditing via sys.dm_exec_sessions.host_name.
When None, the driver sends the machine hostname (from the COMPUTERNAME
or HOSTNAME environment variable). Set via Workstation ID or WSID
in connection strings.
language: Option<String>Session language for server warning/error messages.
When set, sent in LOGIN7’s Language field. The language name can be
up to 128 characters. Set via Language or Current Language in
connection strings.
Implementations§
Source§impl Config
impl Config
Sourcepub fn from_connection_string(conn_str: &str) -> Result<Self, Error>
pub fn from_connection_string(conn_str: &str) -> Result<Self, Error>
Parse a connection string into configuration.
Supports ADO.NET-style connection strings with full quoting support:
Server=localhost;Database=mydb;User Id=sa;Password="complex;pass";Values containing semicolons can be enclosed in double or single quotes
per the ADO.NET specification. The tcp: prefix from Azure Portal
connection strings is automatically stripped.
Sourcepub fn credentials(self, credentials: Credentials) -> Self
pub fn credentials(self, credentials: Credentials) -> Self
Set the credentials.
Sourcepub fn application_name(self, name: impl Into<String>) -> Self
pub fn application_name(self, name: impl Into<String>) -> Self
Set the application name.
Sourcepub fn connect_timeout(self, timeout: Duration) -> Self
pub fn connect_timeout(self, timeout: Duration) -> Self
Set the connect timeout.
Sourcepub fn trust_server_certificate(self, trust: bool) -> Self
pub fn trust_server_certificate(self, trust: bool) -> Self
Set trust server certificate option.
Sourcepub fn strict_mode(self, enabled: bool) -> Self
pub fn strict_mode(self, enabled: bool) -> Self
Enable TDS 8.0 strict mode.
Sourcepub fn tds_version(self, version: TdsVersion) -> Self
pub fn tds_version(self, version: TdsVersion) -> Self
Set the TDS protocol version.
This specifies which TDS protocol version to request during connection. The server may negotiate a lower version if it doesn’t support the requested version.
§Examples
use mssql_client::Config;
use tds_protocol::version::TdsVersion;
// Connect to SQL Server 2008
let config = Config::new()
.host("legacy-server")
.tds_version(TdsVersion::V7_3A);
// Connect to SQL Server 2008 R2
let config = Config::new()
.host("legacy-server")
.tds_version(TdsVersion::V7_3B);Note: When strict_mode is enabled, this is ignored and TDS 8.0 is used.
Sourcepub fn encrypt(self, enabled: bool) -> Self
pub fn encrypt(self, enabled: bool) -> Self
Enable or disable TLS encryption.
When true (default), the connection will use TLS encryption.
When false, encryption is used only if the server requires it.
Warning: Disabling encryption is insecure and should only be used for development/testing on trusted networks.
Sourcepub fn no_tls(self, enabled: bool) -> Self
pub fn no_tls(self, enabled: bool) -> Self
Disable TLS entirely and connect with plaintext (Tiberius-compatible).
⚠️ SECURITY WARNING: This completely disables TLS/SSL encryption. Credentials and all data will be transmitted in plaintext over the network.
§When to use this
This option exists for compatibility with legacy SQL Server versions (2008 and earlier) that may only support TLS 1.0/1.1. Modern TLS libraries like rustls require TLS 1.2 or higher for security reasons, making it impossible to establish encrypted connections to these older servers.
§Security implications
When enabled:
- Login credentials are sent in plaintext
- All query data is transmitted without encryption
- Network traffic can be intercepted and read by attackers
Only use this for development/testing on isolated, trusted networks.
§Example
// Connection string (Tiberius-compatible)
let config = Config::from_connection_string(
"Server=legacy-server;User Id=sa;Password=secret;Encrypt=no_tls"
)?;
// Builder API
let config = Config::new()
.host("legacy-server")
.no_tls(true);Sourcepub fn with_host(self, host: &str) -> Self
pub fn with_host(self, host: &str) -> Self
Create a new configuration with a different host (for routing).
Sourcepub fn with_port(self, port: u16) -> Self
pub fn with_port(self, port: u16) -> Self
Create a new configuration with a different port (for routing).
Sourcepub fn redirect(self, redirect: RedirectConfig) -> Self
pub fn redirect(self, redirect: RedirectConfig) -> Self
Set the redirect handling configuration.
Sourcepub fn max_redirects(self, max: u8) -> Self
pub fn max_redirects(self, max: u8) -> Self
Set the maximum number of redirect attempts.
Sourcepub fn retry(self, retry: RetryPolicy) -> Self
pub fn retry(self, retry: RetryPolicy) -> Self
Set the retry policy for transient error handling.
Sourcepub fn max_retries(self, max: u32) -> Self
pub fn max_retries(self, max: u32) -> Self
Set the maximum number of retry attempts.
Sourcepub fn timeouts(self, timeouts: TimeoutConfig) -> Self
pub fn timeouts(self, timeouts: TimeoutConfig) -> Self
Set the timeout configuration.
Sourcepub fn application_intent(self, intent: ApplicationIntent) -> Self
pub fn application_intent(self, intent: ApplicationIntent) -> Self
Set the application workload intent for AlwaysOn AG routing.
Sourcepub fn workstation_id(self, id: impl Into<String>) -> Self
pub fn workstation_id(self, id: impl Into<String>) -> Self
Set the client workstation name sent to SQL Server in LOGIN7.
This appears in sys.dm_exec_sessions.host_name for auditing.
When not set, the driver sends the machine hostname automatically.