Using dnsdist as a stub resolver #14811
-
|
Hello. I am using dnsmasq as a local stub resolver, but I start hitting some limits with what dnsmasq can do. (It's an amazing tool btw, but it has its limits because of what it is.) I realized I can be using dnsdist a stub resolver pretty effectively. It has a cache; I can use other recursors as "backends"; I can even force use of DNS-over-HTTPS easily. I know that dnsdist is intended as a load balancer, but... I don't see any downside of using it as a local stub resolver? It seems like a more robust solution than using something like stubby. I don't see anyone on the internet writing about this usecase so maybe I am missing something |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 3 replies
-
|
It seems folks at Cloudflare had exactly the same idea and it seems to be working for them!
Nice |
Beta Was this translation helpful? Give feedback.
-
|
Reading it more closely, it seems like they use it for some more advanced usage. But at least I am not the only one to think of dnsdist as a local stub resolver |
Beta Was this translation helpful? Give feedback.
-
|
Maybe people are not posting about this because it is kinda obvious? At least for me using dnsdist as a local caching stub resolver seems a pretty obvious use-case. You can throw in some extra resolver backends for added redundancy. |
Beta Was this translation helpful? Give feedback.
-
|
One thing that I have hit now is that it's impossible to set up servfail on timeouts with dnsdist |
Beta Was this translation helpful? Give feedback.
-
|
It's possible to write retry rules https://dnsdist.org/reference/dq.html#DNSResponse:restart but those are NOT hit with timeouts. |
Beta Was this translation helpful? Give feedback.
Maybe people are not posting about this because it is kinda obvious?
At least for me using dnsdist as a local caching stub resolver seems a pretty obvious use-case. You can throw in some extra resolver backends for added redundancy.