On Mon, 20 Aug 2018 11:15:49 +0100 Simon Hobson <li...@thehobsons.co.uk> wrote:
> wirelessd...@gmail.com wrote: > > > What’s the general consensus on a good authoritative server to pair > > with unbound? > > > > I can see both knot and nsd are packaged in devuan, but have no > > experience with any outside BIND9 and macOS. > > Well as you already have experience with BIND9 (and presumably, a > working config) then it would be logical to stick with that. I would > suggest just using the one package for both authoritative and > recursive queries rather than running two packages which would mean > binding them to different IPs so they don't fight over port 53 on the > same IP. There are disadvantages to having the same software do both auth and cache, and BIND is a big honkin complexity. See the djbdns documentation for details. I think that's why the OP wanted unbound in the first place. The unbound man page mentions nsd as an auth server companion to unbound. I couldn't exactly understand the docs, but it sounds to me like you set up nsd on the machine's IP address and unbound either on 127.0.0.1 or on an alias of your machine's IP address. Then, to unbound.conf, you add a stub zone that points to your nsd server's address. SteveT Steve Litt September 2018 featured book: Quit Joblessness: Start Your Own Business http://www.troubleshooters.com/startbiz _______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
