LWN.net Logo

DNSSEC

DNSSEC

Posted Dec 9, 2011 0:57 UTC (Fri) by zlynx (subscriber, #2285)
In reply to: DNSSEC by Simetrical
Parent article: Some Cerowrt updates

Windows has an OS DNS cache. Oddly enough, it seems most Linux distros do not install a DNS cache by default. I'm not sure about Android.

I'm going to blame NetworkManager for this Linux situation. It used to be pretty easy to modify the network scripts to always point DNS to localhost. NetworkManager seems it makes it far too difficult to configure a local DNS cache.

If you do figure that you need to add dns=dnsmasq to the configuration file, it turns out that dnsmasq is the only supported local cache, and then you find out that it couldn't possibly have been tested, as it crashes NetworkManager randomly (or possibly when two interfaces come up, or it might have something to do with VPNs, or maybe suspend/resume).

Really, the whole caching DNS is a lot easier to set up on the router.


(Log in to post comments)

DNSSEC

Posted Dec 11, 2011 19:08 UTC (Sun) by niner (subscriber, #26151) [Link]

> I'm going to blame NetworkManager for this Linux situation. It used to be pretty easy to modify the network scripts to always point DNS to localhost.
> NetworkManager seems it makes it far too difficult to configure a local DNS cache.

On the KDE Network Management Plasmoid I just edit the connection and change the Method from "Automatic (DHCP)" to "Automatic (DHCP) addresses only" and type the IP address of my DNS server into the DNS Servers field, hit OK and be done. I find this much simpler than with the configuration method I used before NetworkManager. And I can change this per connection so that at home I use my local DNS while at work I use whatever the DHCP server gives me.

DNSSEC

Posted Dec 12, 2011 3:35 UTC (Mon) by zlynx (subscriber, #2285) [Link]

But how do you update the forwarding address in your DNS cache daemon?

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds