Secondary
DNS.
Rust-built.
Battle-ready.

A memory-safe, secondary-only authoritative DNS server. Purpose-built for the public secondary tier of modern DNS.

Explore BoronDNS Downloads
→ Documentation → Quick Start
$borondns serve --config /etc/borondns-secondary/config.toml
zone Active serial 2026061401 source 10.0.0.1:53 (XoT, TSIG ok) transfer IXFR · 0.4 s · 1,182 records rrl enabled · cookies RFC 9018
replies/s (lab): ≈ 4.76 M · 0 allocations/query
$█
≈ 4.76 M
replies/s (lab, UDP)
0
alloc / query
0.4 s
avg IXFR time
35+
RFCs implemented
;; THE INTEGRITY SUITE

Everything you need to run,
test, and trust secondary DNS.

product

BoronDNS

The secondary-only authoritative DNS server. Memory-safe Rust, lock-free reads, hardened against floods, reflection and slowloris by design.

PRODUCT PAGE →
product

BoronGun

The companion traffic tool: generate high-rate DNS load against your own infrastructure to verify capacity and resilience before attackers do.

PRODUCT PAGE →
managed

Services

Managed secondary DNS operated by Integrity Ltd. — geographically separate nameservers for your zones, monitored around the clock.

SEE PLANS →
support
Documentation

Installation guides, configuration reference, hardening checklists and the knowledgebase — from first zone to anycast fleet.

release
Downloads

Release binaries, distribution packages, source archives — with signatures and checksums for every artifact.

open community
Community borondns.org ↗

Issue tracker, discussion, contribution guidelines and the public roadmap — where BoronDNS is built in the open.

Also Quickstart Changelog Audits RFCs Read the docs
Engineering

Built for one job.
Designed for survival.

All features →
SECURITY

Memory-safe parsing

Rust eliminates buffer overflows and use-after-free. Zero allocations per query — not 'low allocation'.

→ Learn more
ARCHITECTURE

Secondary-only scope

AXFR, IXFR, XoT, TSIG. One job, executed precisely. No primary complexity, no feature creep.

→ Learn more
RESILIENCE

DoS resistance built in

Rate limiting (RRL), DNS cookies (RFC 9018), connection limits — from the first commit, not the first incident.

→ Learn more
Installation

Up in minutes.
Secure from day one.

Install via Cargo or download a prebuilt binary for Linux, macOS, or BSD. Add your zone source, configure TSIG, and serve.

View full documentation → Browse all releases →
# via Cargo
$ cargo install borondns

# prebuilt binary (Linux, macOS, BSD)
$ curl -L https://get.borondns.io | sh

# start with config
$ borondns --config /etc/borondns/config.toml