titaniumguardlabs/dns

TitaniumGuard DNS is a DNS server built for people who run servers and networks, written in Rust and packaged as a single program you can run on its own or inside a container. A DNS server is the piece of internet infrastructure that turns a website name into the numeric address computers actually use to find each other. The server can answer plain DNS requests, and it can also support several encrypted ways of asking DNS questions, including DoT, DoH, DoQ, DoH3, and DNSCrypt, which are different methods designed to keep DNS traffic private from anyone watching the network. It can host its own internal DNS zones for things like an office or company network, and it can also forward requests out to the wider internet, but only when that is explicitly turned on and only for machines on trusted address ranges. Answers can be cached either in memory or in Redis, a common caching database, to speed up repeated lookups. The project keeps detailed audit logs of what happened and why, and exposes standard health check endpoints so it can be monitored the way most production services are. It also includes an optional local endpoint that lets AI tools safely query and manage DNS settings. Most features can be turned on or off at build time using Rust's Cargo feature flags, so someone who only needs basic DNS answering can build a smaller program without the encrypted transport code included. The README includes example configuration files showing how to set up zones, records, and caching. The project is released under the Apache License 2.0, which allows free use including commercial use, and it requires the Rust toolchain and Cargo to build.