Skip to main content

DNS: Recursive DNS

Option 1: Public Recursive Name Server

I don't have to do anything since dnsmasq will query something like Cloudflare.

Option 2: Unbound

$ apt install unbound

Recursive DNS can sometimes sacrifice speed for security so the unbound server is going to be limited to only serve DNS requests loopback addresses. Everyone else will have to go through a DNS caching server (_dnsmasq)) I'll setup later to perform DNS queries.

# /etc/unbound/unbound.conf.d/local.conf
+ server:
+ 	interface: 127.0.0.1
+ 	interface: ::1
+ 	access-control: 127.0.0.1 allow
+ 	access-control: ::1 allow
$ systemctl restart unbound