BoronDNS 1.0.0-beta.1 released
We're happy to announce the first public beta of BoronDNS.
What's in beta.1
- Zone transfers — AXFR and IXFR, with incremental diff tracking
- Zone Transfer over TLS (XoT, RFC 9103) — encrypted transfers end-to-end
- DNS cookies (RFC 9018) — stateless client verification
- Response Rate Limiting (RRL) — per-client and per-prefix limits
- TSIG authentication — HMAC-SHA256 and HMAC-SHA512 for all transfers
- Zero-allocation query path — no heap allocations per answered query
Known limitations in beta.1
- No NOTIFY support yet (planned for 1.0.0)
- Metrics endpoint is HTTP only (HTTPS in 1.0.0)
borondnsctl reloadrequires a full restart on some platforms
Installing
cargo install borondns
See the Quick Start guide for full setup instructions.
What comes next
The 1.0.0 stable release will add NOTIFY, a Prometheus metrics endpoint over HTTPS, and verified packages for Debian, Ubuntu, and Alpine.
Full changelog on GitHub.