Knot Resolver
Knot Resolver is a full (recursive), caching DNS resolver. It is designed to scale from small home-office networks to providing DNS servers at the scale of ISPs. Knot Resolver supports DNSSEC, which is enabled by default.
Installation
Install the knot-resolver package.
Configuration
Start/enable kresd@1.service
.
To use Knot Resolver as the local resolver, configure 127.0.0.1
as your nameserver (see see Domain name resolution).
By default, the resolver will listen on localhost, port 53
. If the resolver should be accessible from other hosts, configure other network interfaces in /etc/knot-resolver/kresd.conf
with net.listen()
. Refer to Knot Resolver documentation for more information.
If the resolver should respect entries from the file, add a line to /etc/knot-resolver/kresd.conf
.
Knot Resolver and dnsmasq
If dnsmasq is used for managing DHCP, then advertising a kresd instance works like any other external DNS server would: By adding an line to the dnsmasq configuration file.
Note that a default configuration of dnsmasq will clash with the default configuration of kresd, since both will attempt to use port 53
. Disable the dnsmasq DNS functionality (), or assign a different port to either service.