What Is Trust DNS?

Trust DNS is a free DNS service that encrypts all your queries and ensures that nobody can monitor your activity online. This helps you avoid censorship in countries that block sites like Facebook and Twitter. It also enables you to bypass censorship of other types. It does this by using a variety of different methods, including utilizing DNS redirection, the HTTPS protocol, and VPN connections.

In addition to DNSSEC support, it supports DNS-over-TLS. This is supported via the dns-over-rustls feature, which requires the rustls cryptography library to be installed (cargo install dns-over-rustls). It will use this over a hosts TLS implementation if available and fall back to openssl if not.

DNS-over-HTTPS is also supported with the dns-over-native-tls feature, which does not require any additional libraries to be installed. It will use this over a hosts TLS (or DTLS) implementation if available and fall back to openSSL if not.

This library also provides a DNS resolver that supports RFC 5011 root trust anchor validation, including the ability to verify RRSIG records. It uses the dnssec-openssl or dnssec-ring features, both of which use the *ring* Rust cryptography library (a rework of boringssl). It can perform DNSSEC zone signing and dynamic updates. If you just need a simple resolver, consider the trust-dns-resolver crate which offers a simpler interface.

It can be used in a secure network to enforce Zero Trust policies through intelligent forwarding or steering, policy tiers and full query and response audits. It can also detect DNS tunneling and ward off data exfiltration by providing advanced pattern recognition, volumetric analysis and machine learning models. It can also help identify the most compromised endpoints by analyzing attack patterns and appending user identity information to unsecured entry points for faster threat hunting.