swestrup: (Default)
swestrup ([personal profile] swestrup) wrote 2007-04-19 12:51 am (UTC)

> there's software out there that can replace dnscache?

Alas, not really. dnscache is a (buggy) recursive resolver while dnsmasq is just a forwarding proxy that relies on the recursive resolver of my upstream ISP.

As of about 12 months ago, when akadns.net modified its CNAME linking in response to a massive denial of service attack, dnscache has not been able to resolve most akadns.net domain names, including www.flickr.com, www.microsoft.com, and www.yahoo.com. As you can imagine, this is a bit of a problem.

There are patches for dnscache (and tinydns, for that matter) that fix the current bugs and deficiencies, but I don't have a dev environment set up for my router, and I didn't really like the idea of installing one and applying the patches, although I may eventually go that route.

There is a replacement piece of software called MaraDNS that I looked into, but it doesn't currently support a split horizon configuration, which I need.

Post a comment in response:

This account has disabled anonymous posting.
If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting