Rick Chisholm wrote:
What would you say is preferable - having squid hit a local instance of BIND (or djbdns) or pointing it at the closest upstream name server(s)?
It really depends on your situation, but I personally feel the more caching, the better. Have a local instance of BIND (or djbdns or dnsmasq) which uses the upstream name server as a forwarder. For what it's worth, Squid does its own internal DNS caching as well (see http://www.squid-cache.org/Doc/config/ipcache_size/, http://www.squid-cache.org/Doc/config/positive_dns_ttl/ and http://www.squid-cache.org/Doc/config/negative_dns_ttl/)
Chris