[GH-ISSUE #1722] Add the ability to deny usage of SocketAddrs for outbound ports #751

Closed
opened 2026-03-16 00:07:56 +03:00 by kerem · 1 comment
Owner

Originally created by @bluejekyll on GitHub (Jun 6, 2022).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1722

Is your feature request related to a problem? Please describe.

For various reasons, it can be important to operators to avoid the usage of either particular interfaces or outbound ports. We first need to research why this is necessary, and then understand the best path forward to support this across platforms.

Describe the solution you'd like

Pass a deny list for binding the outgoing request, for UDP where the port is randomized internally in trust-dns, this will be somewhat straightforward. For the TCP based protocols, this my be harder and require moving away from some of the out-of-the-box APIs provided by std and/or tokio.

Originally created by @bluejekyll on GitHub (Jun 6, 2022). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/1722 **Is your feature request related to a problem? Please describe.** For various reasons, it can be important to operators to avoid the usage of either particular interfaces or outbound ports. We first need to research why this is necessary, and then understand the best path forward to support this across platforms. **Describe the solution you'd like** Pass a deny list for binding the outgoing request, for UDP where the port is randomized internally in trust-dns, this will be somewhat straightforward. For the TCP based protocols, this my be harder and require moving away from some of the out-of-the-box APIs provided by `std` and/or `tokio`.
kerem 2026-03-16 00:07:56 +03:00
Author
Owner

@cpu commented on GitHub (Dec 2, 2025):

I believe this was resolved with https://github.com/hickory-dns/hickory-dns/pull/2487. If I'm wrong please add detail on what's left to do & reopen. Thanks!

<!-- gh-comment-id:3602828863 --> @cpu commented on GitHub (Dec 2, 2025): I believe this was resolved with https://github.com/hickory-dns/hickory-dns/pull/2487. If I'm wrong please add detail on what's left to do & reopen. Thanks!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hickory-dns#751
No description provided.