diff --git a/Cargo.lock b/Cargo.lock
index 9d720c89bebc59..9e4df7287e3c19 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2042,7 +2042,7 @@ dependencies = [
  "criterion",
  "data-encoding",
  "thiserror",
- "trust-dns-proto",
+ "trust-dns-proto 0.21.0",
 ]
 
 [[package]]
@@ -2156,6 +2156,18 @@ dependencies = [
  "syn 1.0.84",
 ]
 
+[[package]]
+name = "enum-as-inner"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21cdad81446a7f7dc43f6a77409efeb9733d2fa65553efef6018ef257c959b73"
+dependencies = [
+ "heck 0.4.0",
+ "proc-macro2 1.0.32",
+ "quote 1.0.10",
+ "syn 1.0.84",
+]
+
 [[package]]
 name = "enumflags2"
 version = "0.7.3"
@@ -4199,7 +4211,7 @@ dependencies = [
  "tokio",
  "tokio-rustls",
  "tokio-util 0.6.8",
- "trust-dns-proto",
+ "trust-dns-proto 0.20.4",
  "trust-dns-resolver",
  "typed-builder 0.9.1",
  "uuid",
@@ -7951,7 +7963,32 @@ dependencies = [
  "async-trait",
  "cfg-if 1.0.0",
  "data-encoding",
- "enum-as-inner",
+ "enum-as-inner 0.3.3",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "idna",
+ "ipnet",
+ "lazy_static",
+ "log",
+ "rand 0.8.5",
+ "smallvec",
+ "thiserror",
+ "tinyvec",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "trust-dns-proto"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7d449431143822c64bdf83b9b78857f56fbc8542fb3a8f202a7df0149f0daf"
+dependencies = [
+ "async-trait",
+ "cfg-if 1.0.0",
+ "data-encoding",
+ "enum-as-inner 0.4.0",
  "futures-channel",
  "futures-io",
  "futures-util",
@@ -7984,7 +8021,7 @@ dependencies = [
  "smallvec",
  "thiserror",
  "tokio",
- "trust-dns-proto",
+ "trust-dns-proto 0.20.4",
 ]
 
 [[package]]
@@ -8482,7 +8519,7 @@ dependencies = [
  "tracing-log",
  "tracing-subscriber",
  "tracing-tower",
- "trust-dns-proto",
+ "trust-dns-proto 0.21.0",
  "tui",
  "typetag",
  "url",
diff --git a/Cargo.toml b/Cargo.toml
index 21633679511734..967e11c69d9140 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -283,7 +283,7 @@ tikv-jemallocator = { version = "0.4.3", default-features = false, optional = tr
 tokio-postgres = { version = "0.7.4", default-features = false, features = ["runtime", "with-chrono-0_4"], optional = true }
 toml = { version = "0.5.8", default-features = false }
 tonic = { version = "0.6", optional = true, default-features = false, features = ["transport", "codegen", "prost", "tls"] }
-trust-dns-proto = { version = "0.20", features = ["dnssec"], optional = true }
+trust-dns-proto = { version = "0.21", features = ["dnssec"], optional = true }
 typetag = { version = "0.1.8", default-features = false }
 url = { version = "2.2.2", default-features = false, features = ["serde"] }
 uuid = { version = "0.8.2", default-features = false, features = ["serde", "v4"] }
diff --git a/lib/dnsmsg-parser/Cargo.toml b/lib/dnsmsg-parser/Cargo.toml
index 7422a6482f5385..817bfad83fe79e 100644
--- a/lib/dnsmsg-parser/Cargo.toml
+++ b/lib/dnsmsg-parser/Cargo.toml
@@ -9,7 +9,7 @@ license = "MIT"
 [dependencies]
 data-encoding = "2.2"
 thiserror = "1.0"
-trust-dns-proto = { version = "0.20", features = ["dnssec"] }
+trust-dns-proto = { version = "0.21", features = ["dnssec"] }
 
 [dev-dependencies]
 criterion = "0.3"