Secondary-only DNS
written in Rust

A memory-safe, secondary-only authoritative DNS server. Purpose-built for the public secondary tier of modern DNS. — Pre-release software, not intended for production use.

Explore BoronDNS Downloads
→ Documentation → Quick Start
$borondns serve --config /etc/borondns-secondary/config.toml
zone Active serial 2026061401 source 10.0.0.1:53 (XoT, TSIG ok) transfer IXFR · 0.4 s · 1,182 records rrl enabled · cookies RFC 9018
replies/s (lab): ≈ 4.76 M · 0 allocations/query
$█
;; THE BORONDNS SUITE

Everything you need to run,
test, and trust secondary DNS.

start here

Overview

See how BoronDNS, BoronGun, and managed services fit together to build a dependable secondary DNS setup.

VIEW OVERVIEW →
tooling

Tools & Utilities

Test DNS capacity, resilience, and rate limits with purpose-built tools for your own infrastructure.

EXPLORE TOOLS →
releases

Downloads

Get current binaries, packages, source archives, checksums, and signatures for every release.

BROWSE DOWNLOADS →
guides

Documentation

Installation guides, configuration references, and operational advice from first zone to production.

READ DOCUMENTATION →
Also Quickstart Changelog Audits RFCs Read the docs
Engineering

Built for one job.
Designed for survival.

All features →
SECURITY

Memory-safe parsing

Rust eliminates buffer overflows and use-after-free. Zero allocations per query — not 'low allocation'.

→ Learn more
ARCHITECTURE

Secondary-only scope

AXFR, IXFR, XoT, TSIG. One job, executed precisely. No primary complexity, no feature creep.

→ Learn more
RESILIENCE

DoS resistance built in

Rate limiting (RRL), DNS cookies (RFC 9018), connection limits — from the first commit, not the first incident.

→ Learn more