The author of the Trust-DNS server announced the rebranding of the project to Hickory DNS. The reason for the name change is to make the project more appealing to users, developers, and sponsors, to avoid overlaps in searches with the concept of 'Trusted DNS', and also to register a trademark and protect the brand associated with the project (the name Trust-DNS will be problematic to use as a trademark, as it consists of generic words that cannot be considered unique).
Initially, the project was developed as an experiment to create system components in a programming language that provides means for safe memory operations, but current plans are associated with transforming it into a full-fledged product. Development of the Hickory DNS server will be conducted under the auspices of the ISRG (Internet Security Research Group), which is the founder of the Let’s Encrypt project and promotes the development of technologies to enhance internet security (for example, under the aegis of ISRG, implementations of sudo, TLS modules for the Apache web server, NTP servers, and AV1 decoders written in Rust are being developed).
After the renaming, the project will be moved from the author's personal GitHub repository to a repository under the separate organization Hickory DNS, which will simplify the participation of developers and maintainers from the community. The Crate packages trust-dns-resolver and trust-dns-proto will be renamed to hickory-resolver and hickory-proto, and the main server will be delivered in the hickory-dns package. Currently, the trust-dns-resolver and trust-dns-proto packages have 19 million and 20 million downloads on Crates.io, respectively, and it is expected that with investments from ISRG, the application of the DNS server will expand and make it more convenient for operational deployments.
Hickory DNS zahrnuje komponenty pro zajištění chodu autoritativního DNS serveru, DNS klienta, místního resolveru a rekurzivního DNS serveru. Součástí jsou také knihovny s implementacemi nízkolevelových protokolů. Projekt podporuje DNSSEC, DoT (DNS over TLS), DoH (DNS over HTTPS), DoQ (DNS over QUIC), mDNS (Multicast DNS), DNS-SD (Service Discovery), ANAME, dynamické aktualizace záznamů, CSYNC (Child-to-Parent Synchronization), DANE (DNS-Based Authentication of Named Entities), DNSKEY, CAA (Certification Authority Authorization). V procesu implementace nebo zatím není podporována bezklasová IN-ADDR.ARPA, inkrementální přenos zón, odesílání oznámení sekundárním serverům o aktualizaci zóny, Trusted DNS a S/MIME. Kód projektu je napsán v jazyce Rust a distribuuje se pod licencemi MIT a Apache 2.0.
V budoucnu plánují Hickory DNS využít v infrastruktuře Let’s Encrypt. Před zavedením bude proveden audit bezpečnosti, provede se optimalizace výkonu a zajistí se podpora plně rekurzivních dotazů a jejich validace přes DNSSEC. Z plánů se také zmiňuje podpora NSEC3, politiky cachování různých typů DNS záznamů, prostředky na vyvažování zpracování dotazů a bílé seznamy IP adress pro příchozí spojení.
Zdroj: opennet.ru
