Knot Resolver vs unbound?

[BeachGuy]

Any thoughts on Knot Resolver (https://www.knot-resolver.cz/) vs unbound?

 

[sfx2000]

knot replaces BIND as a reference implementation...

unbound is still a very good choice, as many know the mechanics and work with it...

 

[Angus]

Any thoughts on Knot Resolver (https://www.knot-resolver.cz/) vs unbound?

I looked at these 2 recently, I found kresd doesn't recurse through certain records as you might expect.
For example, with a CNAME pointing to a record in different DNS domain, kresd only returns the CNAME, it doesn't then recursively lookup what that record resolves to on the next DNS server (at least when I last checked - a year or so back I suppose)

unbound is one of the 2 DNS software implementations documented for Red Hat 9 (bind being the other) - it's agood choice

 

[Angus]

knot replaces BIND as a reference implementation...

unbound is still a very good choice, as many know the mechanics and work with it...

knot DNS (knotd) is knot's authoritative DNS server.
Knot Recursor (kresd) is their recursor software.

 

[ColinTaylor]

Knot Recursor (kresd) is their recursor software.

That's resolver not recursor.

 

[BeachGuy]

unbound has been working great for me. Learned big lesson lately -- if it isn't broken don't fix it!

 

[Tech9]

if it isn't broken don't fix it!

The default Dnsmasq included in Asuswrt isn't broken. It does everything needed for a small home network.

 

[BeachGuy]

How do I use that? My understanding is it's just a caching forwarder, not a recursive resolver.

 

[Tech9]

Yes, forwarder and it does what is needed very well. Replacing it with resolver has pros and cons. Unbound is an available add-on for Asuswrt-Merlin firmware, but not necessarily better for the specific task. What was broken in Dnsmasq and needed fixing by replacing it with Unbound?

 

[BeachGuy]

I no longer rely on external resolver for DNS. My router is my resolver. Privacy

 

[Tech9]

Your ISP knows exactly where you connect by IP address and still has quite accurate browsing history of your account. This "privacy" is about the same as using their own DNS servers with the difference your local DNS resolution is actually much slower until your own cache is build up.

 

[Angus]

That's resolver not recursor.

Hi Colin, the terms are interchangeable really, I've just tended in that way over the years.