# Install dns2tcp with Homebrew, apt, MacPorts, Nix TCP over DNS tunnel. Version 0.5.2 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:dns2tcp ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install dns2tcp ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install dns2tcp ``` Evidence: MacPorts ports tree: net/dns2tcp/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install dns2tcp ``` Evidence: Debian stable package indexes: dns2tcp from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#dns2tcp ``` Evidence: nixpkgs package indexes: pkgs/by-name/dn/dns2tcp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:dns2tcp - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.5.2 - **Source summary:** TCP over DNS tunnel - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** GPL-2.0-or-later - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - dns2tcpc (cli) - dns2tcpd (cli) - dns2tcpc (alias) - dns2tcpd (alias) ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.5.2 - Local data: ok - Upstream repository: https://packages.debian.org/sid/dns2tcp - info: No package-manager update timestamp was available. - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage dns2tcp is a client/server tool for relaying TCP connections over DNS. It belongs to the older family of DNS-tunneling utilities used for constrained networks, demonstrations, and security testing rather than general-purpose VPN service. ### Project history The upstream ChangeLog marks version 0.3 as the public release and records later fixes for 64-bit architectures, DNS decoding, privilege dropping, client authentication, and Windows client support. The README is explicit that DNS encapsulation is not encrypted and should be treated as an insecure transport. ### Adoption history dns2tcp stayed visible because it solves one very specific network problem with small C tools: a client, a server, and simple resource mappings. Distribution packaging kept it available for administrators and security testers who need a TCP-over-DNS tunnel without a broader VPN stack. ### How it is used The README shows using dns2tcpc to list available remote resources, bind a local port to a remote service, or run from ~/.dns2tcprc. Server use centers on ~/.dns2tcpdrc, where the operator defines the DNS domain, key, and named resources such as ssh or smtp targets. ### Why package nerds care Package nerds care about dns2tcp because it is a classic small-network-tool package: narrow, risky if misunderstood, but valuable in labs and incident-response toolboxes because it demonstrates TCP-over-DNS behavior with minimal moving parts. ### Timeline - 0.3: Public release. - 0.4: 64-bit architectures start working. - 0.5: Client authentication, Windows client support, and proxy-style use are added. - 0.5.2: OpenSSL includes are removed after earlier library cleanup. ### Related projects - iodine is a related DNS-tunneling project focused on IP-over-DNS rather than TCP-over-DNS. - ssh ProxyCommand workflows are a common adjacent use case for dns2tcpc. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.dns2tcprc, ~/.dns2tcpdrc ## Credential files - Unix: ~/.dns2tcprc, ~/.dns2tcpdrc ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** dns2tcp - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - dns2tcp - 0.5.2-3: normalized package name match | Debian stable package indexes: dns2tcp from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | TCP-over-DNS tunnel server and client | http://www.hsc.fr/ressources/outils/dns2tcp/ - Nix - dns2tcp: normalized package name match | nixpkgs package indexes: pkgs/by-name/dn/dns2tcp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - dns2tcp - 0.5.2-3: normalized package name match | Ubuntu 24.04 LTS package indexes: dns2tcp from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | TCP-over-DNS tunnel server and client | http://www.hsc.fr/ressources/outils/dns2tcp/ - MacPorts - dns2tcp: normalized package name match | MacPorts ports tree: net/dns2tcp/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [autossh](https://www.automicvault.com/pkg/brew/autossh/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [proxytunnel](https://www.automicvault.com/pkg/brew/proxytunnel/) - Shares av.db curated category or tags: cli, networking, tcp, tunnel, tunneling. - [tcptunnel](https://www.automicvault.com/pkg/brew/tcptunnel/) - Shares av.db curated category or tags: cli, networking, tcp, tunneling. - [udp2raw-multiplatform](https://www.automicvault.com/pkg/brew/udp2raw-multiplatform/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [udptunnel](https://www.automicvault.com/pkg/brew/udptunnel/) - Shares av.db curated category or tags: cli, networking, tcp, tunneling. - [zoro](https://www.automicvault.com/pkg/brew/zoro/) - Shares av.db curated category or tags: cli, networking, tcp, tunnel, tunneling. - [bore-cli](https://www.automicvault.com/pkg/brew/bore-cli/) - Shares av.db curated category or tags: cli, networking, tunneling. - [boring](https://www.automicvault.com/pkg/brew/boring/) - Shares av.db curated category or tags: cli, networking, tunnel, tunneling. - [corkscrew](https://www.automicvault.com/pkg/brew/corkscrew/) - Local package facts share a topical domain. Shared terms: cli, networking, tunnel, tunneling. ## Combined YAML source View the package source record on GitHub. [combined/dns2tcp.yml](https://github.com/automic-vault/db/blob/main/combined/dns2tcp.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph