Home / server / Questions / 193326
Accepted
VP.
Asked: 2010-10-22 01:33:15 +0800 CST

dns cache to run on a bastion host

  • 772

I'm configuring a bastion host with Linux. It will run DHCP and DNS (resolver, recursive and cache)

The solutions that I'm considering are:

  • djbdns
  • powerdns
  • isc dns
  • unbound

For DHCP I'm thinking about ISC DHCPD.

Something that I found interesting is dnsmasq. What do you like?

firewall linux domain-name-system

1 Answers

  1. Best Answer

    dnsmasq is ideal for that role, although its configuration options are limited compared to a standalone DHCP or DNS server. Many small home routers now use dnsmasq in their firmware.

    Should you decide against that, I'd also suggest looking at Unbound for the recursive resolver. Because it's only a recursive resolver it's not bloated with the features that a general purpose server like BIND has, but it does also support DNSSEC out of the box, unlike djbdns.

    • 2