Hickory DNS is a safe and secure DNS server with a variety of protocol features
(DNSSEC, TSIG, SIG(0), DoT, DoQ, DoH). It can be operated as an authoritative
DNS server, forwarding resolver, stub resolver, or a recursive resolver (experimental).
Zone data can be managed in-memory, with flat files, or with an SQLite database.


Usage:

Options:
      --validate
          Test validation of configuration files
      --workers <WORKERS>
          Number of runtime workers, defaults to the number of CPU cores
  -q, --quiet
          Disable INFO messages, WARN and ERROR will remain
  -d, --debug
          Turn on `DEBUG` messages (default is only `INFO`)
  -c, --config <NAME>
          Path to configuration file of named server [default: /etc/named.toml]
  -z, --zonedir <DIR>
          Path to the root directory for all zone files, see also config toml
  -p, --port <PORT>
          Listening port for DNS queries, overrides any value in config file
      --tls-port <TLS-PORT>
          Listening port for DNS over TLS queries, overrides any value in config file
      --https-port <HTTPS-PORT>
          Listening port for DNS over HTTPS queries, overrides any value in config file
      --quic-port <QUIC-PORT>
          Listening port for DNS over QUIC queries, overrides any value in config file
      --prometheus-listen-address <PROMETHEUS-LISTEN-ADDRESS>
          Listening socket for Prometheus metrics, for remote access configure socket as needed (e.g. 0.0.0.0:9000) overrides any value in config file
      --disable-tcp
          Disable TCP protocol, overrides any value in config file
      --disable-udp
          Disable UDP protocol, overrides any value in config file
      --disable-tls
          Disable TLS protocol, overrides any value in config file
      --disable-https
          Disable HTTPS protocol, overrides any value in config file
      --disable-quic
          Disable QUIC protocol, overrides any value in config file
      --disable-prometheus
          Disable Prometheus metrics, overrides any value in config file
      --nsid <NSID>
          Name server identifier (NSID) payload for EDNS responses. Use `0x` prefix for hex-encoded data. Mutually exclusive with --nsid-hostname
      --nsid-hostname
          Use the system hostname as the name server identifier (NSID) payload for EDNS responses. Mutually exclusive with --nsid
  -h, --help
          Print help
  -V, --version
          Print version