OSS diversity is good (aka why we run various dns servers flavors in CentOS)
summary
CentOS.org runs BIND, Unbound, PowerDNS and Dnsmasq in parallel and chooses each by role: BIND with nsupdate handles dynamic DNS and automated ACME DNS challenges, PowerDNS uses PowerDNS with SQL backends to serve regionally-targeted records and complex delegation logic, Unbound provides fast, privacy-minded recursive resolution, and Dnsmasq covers small local caches. A central GPG-encrypted repo pushes zone data and configuration; the ACME automation and regional routing are implemented and operational.
AI-written summary · about
chapters (8)
- 0:00Introduction to DNS diversity
- 2:51Early DNS server choices
- 6:14Certificate challenges and automation
- 15:01PowerDNS and delegation logic
- 20:13Security and privacy considerations
- 26:52Switching DNS servers
- 30:55Centralized configuration management
- 32:00Q&A
related talks
34mUsing DNS as a layer of defense
34mIt’s Always DNS: So Let’s Break It On Purpose
52mCalloused DNS: doing it right
35mCoreDNS: Beyond the Basics
23mIstio and DNS
15mYou Depend on DNS, This Is How It Works and You Won't...
01h 27mDNS at 30
16mSCALE: Automatically Finding RFC Compliance Bugs in DNS Nameservers