Autor: Simon Hobson Data: Para: Liste, DNG Assunto: Re: [DNG] Unbound details: was Mozilla and cloudflare to hijack all
your DNS requests - for your own good of course
wirelessduck@??? wrote:
> I want to switch from macOS Server to unbound for a local LAN DNS as its DNS features will be deprecated soon, but my reading tells me that unbound only acts as a recursive nameserver, not authoritative.
>
> What’s the general consensus on a good authoritative server to pair with unbound?
>
> I can see both knot and nsd are packaged in devuan, but have no experience with any outside BIND9 and macOS.
Well as you already have experience with BIND9 (and presumably, a working config) then it would be logical to stick with that. I would suggest just using the one package for both authoritative and recursive queries rather than running two packages which would mean binding them to different IPs so they don't fight over port 53 on the same IP.
I haven't been following OSX Server, so they are dropping DNS now ? It's always seemed like the unwanted stepchild, not really promoted or developed, and with no proper server hardware to run it on (I used to manage two of the original XServes with 10.3 in the past).
Is BIND in OSX Ports or Fink ?