Trust-DNS DNS server's author announced the renaming of the project to Hickory DNS. The reason for the name change is to make the project more appealing to users, developers, and sponsors, avoid overlaps in search with the concept of 'Trusted DNS', and also to register a trademark and protect the associated project brand (the name Trust-DNS would be problematic to use as a trademark, as it is formed from common words that cannot be considered unique).
Initially, the project developed as an experiment to create system components in a programming language that provides tools for safe memory operations; however, the current plans are focused on turning it into a full-fledged product. The development of the Hickory DNS server will be conducted under the auspices of the ISRG (Internet Security Research Group), which is the founder of the Let’s Encrypt project and promotes the development of technologies to enhance internet security (for example, under the auspices of ISRG, implementations of sudo, TLS module for the Apache web server, NTP server, and AV1 decoder, written in Rust, are being developed).
After the renaming, the project will be moved from the author's personal GitHub repository to a separate organization repository called Hickory DNS, which will simplify participation for developers and contributors from the community. The crate packages trust-dns-resolver and trust-dns-proto will be renamed to hickory-resolver and hickory-proto, while the core server will be supplied in the hickory-dns package. Currently, the trust-dns-resolver and trust-dns-proto packages have 19 and 20 million downloads on Crates.io, and it is expected that with investments from ISRG, the DNS server's application can be expanded and made more convenient for operational deployments.
Hickory DNS hõlmab komponente autoriteetse DNS-serveri, DNS-klientide, kohalike resolverite ja rekurssiivsete DNS-serverite käitamiseks. Samuti sisaldab see madalama taseme protokollide rakendusi sisaldavaid raamatukogusid. Projekt toetab DNSSEC-d, DoT (DNS üle TLS), DoH (DNS üle HTTPS), DoQ (DNS üle QUIC), mDNS (Multicast DNS), DNS-SD (Teenuse Avastus), ANAME, dünaamilist kirje värskendamist, CSYNC (laste ja vanemate sünkroniseerimine), DANE (DNS-põhine nimetatud isikute autentimine), DNSKEY, CAA (Sertifitseerimisasutuse volitamine). Rakendamise protsessis või senikaua, kuni on valmis, toetatakse klassideta IN-ADDR.ARPA, tsoonide inkrementaalset edastamist, teisejärguliste serverite teavitamist tsooni värskendamisest, Trusted DNS ja S/MIME. Projekti kood on kirjutatud Rusti keeles ja levitatakse MIT ja Apache 2.0 litsentsi alusel.
Tulevikus plaanitakse Hickory DNS-i kaasata Let’s Encrypt infrastruktuuri. Enne juurutamist viiakse läbi turvaaudit, optimeeritakse jõudlust ja tagatakse täielikult rekurssiivsete päringute toetamine ning nende valideerimine DNSSEC-i kaudu. Plaanides mainitakse ka NSEC3 toe, erinevate DNS-kirje tüüpide vahehoidla poliitikaid, päringute töötlemise tasakaalustamisvahendeid, valgeid nimekirju. IP-aadresse sissetulevate ühenduste jaoks.
Allikas: opennet.ru
