On 25/08/2018 11:23, [email protected] wrote:
Currently happily using PowerDNS Recursor (4.1.3) on 5 servers in an
anycast configuration. Currently*not*  using dnsdist (because it's
not obvious to me why I need it, and it's one more moving part that
could potentially break).

Because of this, my preference would be to have DoT / DoH available
directly in PowerDNS Recursor, without using dnsdist.

At a home or branch office installation, I'm happy to use plain DNS internally to a local cache, but I'd like to secure the outbound DNS traffic.

This means I'm interested in the opposite feature: I'd like PDNS Recursor to be able to forward traffic using DoH to an upstream trusted recursor - i.e. act as a DoH client.

This is a stop-gap though.  Ultimately I'd like PDNS Recursor to be able to communicate directly and securely to the authoritative servers, but I don't know if that's even a Thing yet.

Regards,

Brian.

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to