<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">+1 for unbound<div class=""><br class=""><div class="">it has a great internal record factory, that’s very versatile, with lots of failsafes, and fallbacks, and it plays nicely with redis (can consume a previously dumped cache).</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class=""><div class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Helvetica Neue"; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-j</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Helvetica Neue"; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><br class="Apple-interchange-newline"></div></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On Sep 21, 2020, at 1:22 PM, Grand Rapids Linux Users Group <<a href="mailto:grlug@grlug.org" class="">grlug@grlug.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">We've had a ton of issues with systemd DNS resolver doing silly things like crashing and causing huge issues since all resolution fails. (notably, I haven't tried it in probably a year, so maybe newer versions are better), but it seems to me, adding something into the DNS resolver path is just adding another point of failure.<div class=""><br class=""></div><div class="">If you do really need DNS caching, check out unbound. It's super fast/lightweight (compared to BIND), if you're just doing caching.. For all my internal stuff, I disable systemd's resolver, and use unbound.</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Sep 21, 2020 at 1:19 PM Grand Rapids Linux Users Group <<a href="mailto:grlug@grlug.org" class="">grlug@grlug.org</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class="">
<div class="">I'm more used to using BIND DNS as a
recursive resolver and/or machine-local caching resolver. It may
be older, but if it ain't broke, don't fix it. So, if it's
available to you (depending on how much control you have of the
environment you run in), you might want to give it a try. It's
easy to set up and boringly reliable.<br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Warm Regards,<br class="">
Kyle Maas</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">On 9/20/20 7:18 PM, Grand Rapids Linux
Users Group wrote:<br class="">
</div>
<blockquote type="cite" class="">
I’ve been underwhelmed by systemd DNS for a few months, and am
working through it’s implementation on both ubuntu and centos to
determine why / where it gets its hooks, but haven’t found a real
fix for it, yet. There are ways to inject nameservers / search
domain.tld / etc. using NetworkManager, network/ing.service,
internal dhcp or dhclient, but none are consistently implemented
and you end up with hosts that fail to resolve internal and
external fqdns until you trounce /etc/resolv.conf with a sane
version of nameservers for your network.
<div class=""><br class="">
</div>
<div class="">Currently netplan appears to be the most reasonable
management option, but I’m still working through it’s
implementation and deployment. One of the challenges, I’m
running into is that I’m migrating my VirtualBox VMs to libvirt
/ KVM, which adds the additional complication of configuring
bonding, but have mostly worked through those details and have a
good netplan configuration for the kvm nodes, just need to
finalize how to reapply the netplan on running hosts without
disrupting networking on the various guests when network changes
happen.</div>
<div class=""><br class="">
</div>
<div class="">If anyone else is also working on ways to replace
systemd’s brain-dead DNS implementation, I’d be interested in
seeing what you’re experiencing. Seems a good problem to gather
collaborators for, especially those using different distros,
such as centos, ubuntu, suse, etc.</div>
<div class=""><br class="">
</div>
<div class="">-Van<br class="">
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On Sep 18, 2020, at 18:59, Grand Rapids Linux
Users Group <<a href="mailto:grlug@grlug.org" target="_blank" class="">grlug@grlug.org</a>> wrote:</div>
<br class="">
<div class="">
<div class="">Have a VPS that came configured to use
systemd DNS, .. and every now and<br class="">
then resolution fails (there are Nagios checks checking
for the various<br class="">
websites on that server).<br class="">
<br class="">
Anyone ever seen such a transient failures?<br class="">
<br class="">
Thanks!<br class="">
-- <br class="">
grlug mailing list<br class="">
<a href="mailto:grlug@grlug.org" target="_blank" class="">grlug@grlug.org</a><br class="">
<a href="https://shinobu.grlug.org/mailman/listinfo/grlug" target="_blank" class="">https://shinobu.grlug.org/mailman/listinfo/grlug</a><br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
<br class="">
<fieldset class=""></fieldset>
</blockquote><p class=""><br class="">
</p>
</div>
-- <br class="">
grlug mailing list<br class="">
<a href="mailto:grlug@grlug.org" target="_blank" class="">grlug@grlug.org</a><br class="">
<a href="https://shinobu.grlug.org/mailman/listinfo/grlug" rel="noreferrer" target="_blank" class="">https://shinobu.grlug.org/mailman/listinfo/grlug</a><br class="">
</blockquote></div>
-- <br class="">grlug mailing list<br class=""><a href="mailto:grlug@grlug.org" class="">grlug@grlug.org</a><br class="">https://shinobu.grlug.org/mailman/listinfo/grlug<br class=""></div></blockquote></div><br class=""></div></div></div></body></html>