Calloused DNS: doing it right
summary
Talk compares common DNS setups using BIND and explains problems administrators face when they replace provider DNS with BIND and then mix resolver and authoritative roles (split-horizon setups). It reviews BIND’s features and argues that, despite advantages like split-horizon, BIND is not the best-performing option and recommends more appropriate DNS choices and practices.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 1:09DNS problems at MaxNet
- 3:58Resolver software setup
- 6:23Kernel options and performance
- 8:56Resolver caching and TTL
- 10:05DNSSEC: attack protection
- 12:13Resolver security
- 15:19DNS query monitoring
- 19:16Authoritative DNS servers: why needed
- 21:05DNS server software choice
- 24:19PowerDNS architecture
- 27:57DNS database replication
- 30:26Master and slave roles in DNS
- 33:36DNS server monitoring
- 35:28Zone mixing and site blocking
- 37:15Q&A
- 41:49DNS server redundancy
- 43:37XFR and replication issues
- 45:26NS records and geo-DNS
- 47:38PowerDNS 4.x changes
- 48:41Query limiting and rate limiting
- 50:11Recursive DNS vs forwarding
