Re: systemd-resolved fallback DNS servers: usability vs. GDPR

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



No, this is not true. DNS servers had for ages ability to forward
selected domains to specified list of addresses. All DNS caches have the
ability to do it for no reason.

Servers do not have automatic configuration of split DNS only, because
often do not have multiple connections. But I think VPNs could be also
used to interconnect networks and selected DNS forwarding might still be
benefical for it.

However, servers need a proper DNS service. Very often they depend on
DNSSEC for mail filtering. They should protect their precious caches
with signatures. DNSSEC disabled by default, even when upstream service
provides perfectly working DNS, is just failure on our side.
Especially on servers, when DNSSEC readines would be much more common
than on crappy cheap home routers.

Remote DNS does not have to be much slower. If you have dedicated
resolver on the same LAN as you, your own cache might not help you much.
Depends a lot on specific applications usage.

On 2/25/21 4:42 PM, Michael Catanzaro wrote:
> On Thu, Feb 25, 2021 at 10:51 am, Florian Weimer <fweimer@xxxxxxxxxx>
> wrote:
>> Why do you think that?
> 
> Servers don't need split DNS. Desktops do. Without a DNS cache, your DNS
> will be slower. Without split DNS, your DNS may not work properly at all.

-- 
Petr Menšík
Software Engineer
Red Hat, http://www.redhat.com/
email: pemensik@xxxxxxxxxx
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux