[dns-operations] Should medium-sized companies run their own recursive resolver?

[Richard Lamb]

Thank you Paul!

if we had spent the man hours which have been used up by this thread, collaborating to build an ISO image in kvm, vmware, and xen formats, that did nothing but boot up and offer recursive dns to the local LAN, with auto-update of dnssec keys, default limits for rate limiting, and a subscription to an RPZ that was hosted say by DNS-OARC, then we'd be done by now. it could have a slightly custom kernel that allowed the server to specify IP.TTL=3 in sendmsg().

+1

that is, we could be done by now, shipping it, arguing about how to document it and support it and publicize its existence. we could be making the rounds of our respective friends and families to find all the openwrt forks and get each of them to offer identical functionality. somebody could write a BCP about it.

done by now. out the door. boat in water.

+1

Maybe some links for reasonable annual $upport next to the ISO links would be good too.

-Rick

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20131017/e53c5cf5/attachment.html>