t-DNS client proxy is paired with t-DNS server proxy, so you should have tdns_cli_proxy running on the recursive resolver side first. 

Ideally, the whole instructure should be as following:
                               TLS
apps/stub<->tdns_cli_proxy <===========> tdns_serv_proxy <-> BIND/Unbound



1. run t-DNS server proxy on your recursive resolver's machine:
down load the t-DNS server proxy from http://www.isi.edu/ant/software/index.html
compile: make all
run: ./tdns_serv_proxy -p 10053 

2. run t-DNS client proxy on your own machine:
Make sure you machine has openssl and libbind installed before compiling the code.
On Fedora: sudo yum install openssl-devel libbind-devel
compile: make all
run: sudo ./tdns_cli_proxy -t ssl -r 128.9.168.212 -p 10053 -l 53
tdns_cli_proxy will take queries from 127.0.0.1 on port 53, then forward them to tdns_serv_proxy over TLS.  
Also it forwards responses back.


3. edit /etc/resolv.conf on your machine
make  "127.0.0.1" as your default nameserver
and make sure no any DNS recursive resolver or forwarder such as dnsmasq, Unbound and BIND are running on your machine.
Stop them if they are running. then you are good to go. 


