From Fedora Project Wiki
< SIGs
(→IETF Standards: add deleg and intarea) |
|||
| (17 intermediate revisions by the same user not shown) | |||
| Line 15: | Line 15: | ||
* [[Changes/Default Local DNS Resolver]] | * [[Changes/Default Local DNS Resolver]] | ||
* How to enable DNS over TLS on implementation-indepepdendent way? | * How to enable DNS over TLS on implementation-indepepdendent way? | ||
=== Infrastructure === | |||
* [https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/dns/ DNS sysadmin guide] - description of infrastructure used for Fedora | |||
* [https://docs.fedoraproject.org/en-US/fedora-server/administration/dnsmasq/ Fedora server dnsmasq article] | |||
=== IETF Standards === | |||
* [https://datatracker.ietf.org/wg/dnsop/documents/ Domain Name System Operations (dnsop)] group documents | |||
* [https://datatracker.ietf.org/wg/add/documents/ Adaptive DNS Discovery (add)] group documents | |||
* [https://datatracker.ietf.org/wg/dprive/documents/ DNS PRIVate Exchange (dprive)] group documents | |||
* [https://datatracker.ietf.org/wg/deleg/documents/ DNS Delegation (deleg)] group documents | |||
* [https://datatracker.ietf.org/wg/intarea/documents/ Internet Area Working Group (intarea)] group documents | |||
* [https://datatracker.ietf.org/wg/dnsext/documents/ DNS Extensions (dnsext)] group documents (concluded) | |||
* [https://datatracker.ietf.org/wg/mif/documents/ Multiple Interfaces (mif)] group documents (concluded) | |||
* [https://datatracker.ietf.org/wg/dnssd/documents/ Extensions for Scalable DNS Service Discovery (dnssd)] group documents | |||
* [https://rfc-annotations.research.icann.org/ ICANN annotations] | |||
== Implementations == | == Implementations == | ||
=== Universal === | === Universal === | ||
* bind9 - [https://src.fedoraproject.org/rpms/bind pkg:bind], [https://src.fedoraproject.org/rpms/bind9-next pkg:bind9-next], [https://www.isc.org/bind/ upstream], [https://gitlab.isc.org/isc-projects/bind9 upstream source] | * bind9 - [https://src.fedoraproject.org/rpms/bind pkg:bind], [https://src.fedoraproject.org/rpms/bind9-next pkg:bind9-next], [https://www.isc.org/bind/ upstream], [https://gitlab.isc.org/isc-projects/bind9 upstream source] [https://bind9.readthedocs.io/ docs] | ||
** in RHEL 7+ | |||
** [https://kb.isc.org/docs/aa-01310 Feature matrix] | |||
** [https://chat.dns-oarc.net/community/channels/bind9 bind9 Mattermost channel] | |||
=== Recursive === | === Recursive === | ||
* knot-resolver - [https://src.fedoraproject.org/rpms/knot-resolver pkg:knot-resolver], [https://www.knot-resolver.cz/ upstream],[https://knot-resolver.readthedocs.io/en/stable/ docs], [https://gitlab.nic.cz/knot/knot-resolver upstream source] | * knot-resolver - [https://src.fedoraproject.org/rpms/knot-resolver pkg:knot-resolver], [https://www.knot-resolver.cz/ upstream],[https://knot-resolver.readthedocs.io/en/stable/ docs], [https://gitlab.nic.cz/knot/knot-resolver upstream source] | ||
* powerdns-recursor - [https://www.powerdns.com/powerdns-recursor upstream] | * powerdns-recursor - [https://src.fedoraproject.org/rpms/pdns-recursor pkg:pdns-recursor], [https://www.powerdns.com/powerdns-recursor upstream], [https://github.com/PowerDNS/pdns upstream source] | ||
* unbound - [https://src.fedoraproject.org/rpms/unbound pkg:unbound], [https://nlnetlabs.nl/projects/unbound/about/ upstream], [https://github.com/NLnetLabs/unbound upstream source] | * unbound - [https://src.fedoraproject.org/rpms/unbound pkg:unbound], [https://nlnetlabs.nl/projects/unbound/about/ upstream], [https://github.com/NLnetLabs/unbound upstream source] | ||
** in RHEL 7+ | |||
=== Stub resolvers === | === Stub resolvers === | ||
* dnsmasq - [https://src.fedoraproject.org/rpms/dnsmasq/ pkg:dnsmasq], [https://dnsmasq.org/ upstream], [https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary upstream source] | * dnsmasq - [https://src.fedoraproject.org/rpms/dnsmasq/ pkg:dnsmasq], [https://dnsmasq.org/ upstream], [https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary upstream source] | ||
** in RHEL 7+ | ** in RHEL 7+ | ||
* stubby - [https://src.fedoraproject.org/rpms/stubby pkg:stubby], [https://github.com/getdnsapi/stubby upstream source] | |||
** DNS over TLS | |||
* systemd-resolved - [https://src.fedoraproject.org/rpms/systemd/ pkg:systemd], [https://systemd.io/ upstream], [https://github.com/systemd/systemd upstream source] | * systemd-resolved - [https://src.fedoraproject.org/rpms/systemd/ pkg:systemd], [https://systemd.io/ upstream], [https://github.com/systemd/systemd upstream source] | ||
** in RHEL 8+ (Tech. preview) | ** in RHEL 8+ (Tech. preview) | ||
** Default in Fedora Workstation and Fedora Server | ** Default in Fedora Workstation and Fedora Server | ||
* | * dnsdist - [https://src.fedoraproject.org/rpms/dnsdist pkg:dnsdist] [https://dnsdist.org/ upstream] | ||
** DNS over TLS | ** DNS over TLS + DNS over HTTPS forwarding support | ||
** Load-balancer, can be used as a stub too. | |||
** Does not cache in default configuration | |||
=== Authoritative === | === Authoritative === | ||
| Line 39: | Line 64: | ||
* powerdns - [https://src.fedoraproject.org/rpms/pdns pkg:pdns] [https://www.powerdns.com/powerdns-authoritative-server upstream] | * powerdns - [https://src.fedoraproject.org/rpms/pdns pkg:pdns] [https://www.powerdns.com/powerdns-authoritative-server upstream] | ||
* NSD - [https://src.fedoraproject.org/rpms/nsd pkg:nsd], [https://www.nlnetlabs.nl/projects/nsd/about/ upstream] | * NSD - [https://src.fedoraproject.org/rpms/nsd pkg:nsd], [https://www.nlnetlabs.nl/projects/nsd/about/ upstream] | ||
* knot dns - [https://src.fedoraproject.org/rpms/knot pkg:knot], [https://gitlab.nic.cz/knot/knot-dns upstream source] | * knot dns - [https://src.fedoraproject.org/rpms/knot pkg:knot], [https://gitlab.nic.cz/knot/knot-dns upstream source], [https://www.knot-dns.cz/ upstream] | ||
== Benefit to Fedora == | == Benefit to Fedora == | ||
A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol. | A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol. | ||
=== Packages included === | |||
* [https://src.fedoraproject.org/group/dns-sig dns-sig group sources] | |||
* [https://packager-dashboard.fedoraproject.org/dashboard?groups=dns-sig packager dashboard] - bugs summary for packages in DNS SIG | |||
== Communication == | == Communication == | ||
| Line 59: | Line 89: | ||
* [https://matrix.to/#/!DSZOxxZEyfJAvZXcmh:libera.chat?via=libera.chat&via=matrix.org&via=fedora.im #dns] - leads just to above IRC | * [https://matrix.to/#/!DSZOxxZEyfJAvZXcmh:libera.chat?via=libera.chat&via=matrix.org&via=fedora.im #dns] - leads just to above IRC | ||
* [https://matrix.to/#/#dns:fedora.im #dns:fedora.im] - Fresh new empty room | |||
=== Mattermost === | === Mattermost === | ||
Latest revision as of 11:19, 21 August 2024
Domain Name Services Special Interest Group
Goal
Improve and collaborate on name resolution servers and clients working on Fedora.
Topics
- DNS client tools
- DNSSEC deployment on both server and clients
- Common DNS cache configuration
- Networking/NameResolution
- Networking/Ideas/NetworkNameResolution
- Changes/DNS Over TLS
- Changes/Default Local DNS Resolver
- How to enable DNS over TLS on implementation-indepepdendent way?
Infrastructure
- DNS sysadmin guide - description of infrastructure used for Fedora
- Fedora server dnsmasq article
IETF Standards
- Domain Name System Operations (dnsop) group documents
- Adaptive DNS Discovery (add) group documents
- DNS PRIVate Exchange (dprive) group documents
- DNS Delegation (deleg) group documents
- Internet Area Working Group (intarea) group documents
- DNS Extensions (dnsext) group documents (concluded)
- Multiple Interfaces (mif) group documents (concluded)
- Extensions for Scalable DNS Service Discovery (dnssd) group documents
- ICANN annotations
Implementations
Universal
- bind9 - pkg:bind, pkg:bind9-next, upstream, upstream source docs
- in RHEL 7+
- Feature matrix
- bind9 Mattermost channel
Recursive
- knot-resolver - pkg:knot-resolver, upstream,docs, upstream source
- powerdns-recursor - pkg:pdns-recursor, upstream, upstream source
- unbound - pkg:unbound, upstream, upstream source
- in RHEL 7+
Stub resolvers
- dnsmasq - pkg:dnsmasq, upstream, upstream source
- in RHEL 7+
- stubby - pkg:stubby, upstream source
- DNS over TLS
- systemd-resolved - pkg:systemd, upstream, upstream source
- in RHEL 8+ (Tech. preview)
- Default in Fedora Workstation and Fedora Server
- dnsdist - pkg:dnsdist upstream
- DNS over TLS + DNS over HTTPS forwarding support
- Load-balancer, can be used as a stub too.
- Does not cache in default configuration
Authoritative
Benefit to Fedora
A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol.
Packages included
- dns-sig group sources
- packager dashboard - bugs summary for packages in DNS SIG
Communication
Mailing list
IRC
#dnschannel on Libera.Chat- dns-channel resources
Matrix
- #dns - leads just to above IRC
- #dns:fedora.im - Fresh new empty room