From Fedora Project Wiki
< SIGs
(initial version) |
|||
| (27 intermediate revisions by the same user not shown) | |||
| Line 10: | Line 10: | ||
* DNSSEC deployment on both server and clients | * DNSSEC deployment on both server and clients | ||
* Common DNS cache configuration | * Common DNS cache configuration | ||
* [[Networking/NameResolution]] | |||
* [[Networking/Ideas/NetworkNameResolution]] | |||
* [[Changes/DNS Over TLS]] | |||
* [[Changes/Default Local DNS Resolver]] | |||
* How to enable DNS over TLS on implementation-indepepdendent way? | |||
=== Infrastructure === | |||
* [https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/dns/ DNS sysadmin guide] - description of infrastructure used for Fedora | |||
* [https://docs.fedoraproject.org/en-US/fedora-server/administration/dnsmasq/ Fedora server dnsmasq article] | |||
=== IETF Standards === | |||
* [https://datatracker.ietf.org/wg/dnsop/documents/ Domain Name System Operations (dnsop)] group documents | |||
* [https://datatracker.ietf.org/wg/add/documents/ Adaptive DNS Discovery (add)] group documents | |||
* [https://datatracker.ietf.org/wg/dprive/documents/ DNS PRIVate Exchange (dprive)] group documents | |||
* [https://datatracker.ietf.org/wg/dnsext/documents/ DNS Extensions (dnsext)] group documents (concluded) | |||
* [https://datatracker.ietf.org/wg/mif/documents/ Multiple Interfaces (mif)] group documents (concluded) | |||
* [https://datatracker.ietf.org/wg/dnssd/documents/ Extensions for Scalable DNS Service Discovery (dnssd)] group documents | |||
* [https://rfc-annotations.research.icann.org/ ICANN annotations] | |||
== Implementations == | == Implementations == | ||
=== | === Universal === | ||
* bind9 | * bind9 - [https://src.fedoraproject.org/rpms/bind pkg:bind], [https://src.fedoraproject.org/rpms/bind9-next pkg:bind9-next], [https://www.isc.org/bind/ upstream], [https://gitlab.isc.org/isc-projects/bind9 upstream source] [https://bind9.readthedocs.io/ docs] | ||
* | ** in RHEL 7+ | ||
* knot-resolver | ** [https://kb.isc.org/docs/aa-01310 Feature matrix] | ||
* powerdns-recursor | ** [https://chat.dns-oarc.net/community/channels/bind9 bind9 Mattermost channel] | ||
* systemd-resolved | |||
* | === Recursive === | ||
* knot-resolver - [https://src.fedoraproject.org/rpms/knot-resolver pkg:knot-resolver], [https://www.knot-resolver.cz/ upstream],[https://knot-resolver.readthedocs.io/en/stable/ docs], [https://gitlab.nic.cz/knot/knot-resolver upstream source] | |||
* powerdns-recursor - [https://src.fedoraproject.org/rpms/pdns-recursor pkg:pdns-recursor], [https://www.powerdns.com/powerdns-recursor upstream], [https://github.com/PowerDNS/pdns upstream source] | |||
* unbound - [https://src.fedoraproject.org/rpms/unbound pkg:unbound], [https://nlnetlabs.nl/projects/unbound/about/ upstream], [https://github.com/NLnetLabs/unbound upstream source] | |||
** in RHEL 7+ | |||
=== Stub resolvers === | |||
* dnsmasq - [https://src.fedoraproject.org/rpms/dnsmasq/ pkg:dnsmasq], [https://dnsmasq.org/ upstream], [https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary upstream source] | |||
** in RHEL 7+ | |||
* stubby - [https://src.fedoraproject.org/rpms/stubby pkg:stubby], [https://github.com/getdnsapi/stubby upstream source] | |||
** DNS over TLS | |||
* systemd-resolved - [https://src.fedoraproject.org/rpms/systemd/ pkg:systemd], [https://systemd.io/ upstream], [https://github.com/systemd/systemd upstream source] | |||
** in RHEL 8+ (Tech. preview) | |||
** Default in Fedora Workstation and Fedora Server | |||
* dnsdist - [https://src.fedoraproject.org/rpms/dnsdist pkg:dnsdist] [https://dnsdist.org/ upstream] | |||
** DNS over TLS + DNS over HTTPS forwarding support | |||
** Load-balancer, can be used as a stub too. | |||
** Does not cache in default configuration | |||
=== Authoritative === | |||
* powerdns - [https://src.fedoraproject.org/rpms/pdns pkg:pdns] [https://www.powerdns.com/powerdns-authoritative-server upstream] | |||
* NSD - [https://src.fedoraproject.org/rpms/nsd pkg:nsd], [https://www.nlnetlabs.nl/projects/nsd/about/ upstream] | |||
* knot dns - [https://src.fedoraproject.org/rpms/knot pkg:knot], [https://gitlab.nic.cz/knot/knot-dns upstream source], [https://www.knot-dns.cz/ upstream] | |||
== Benefit to Fedora == | == Benefit to Fedora == | ||
A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol. | A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol. | ||
=== Packages included === | |||
* [https://src.fedoraproject.org/group/dns-sig dns-sig group sources] | |||
* [https://packager-dashboard.fedoraproject.org/dashboard?groups=dns-sig packager dashboard] - bugs summary for packages in DNS SIG | |||
== Communication == | == Communication == | ||
| Line 34: | Line 82: | ||
* `#dns` channel on Libera.Chat | * `#dns` channel on Libera.Chat | ||
* [http://dns-channel.github.io/ dns-channel resources] | |||
=== Matrix === | === Matrix === | ||
* [https://matrix.to/#/!DSZOxxZEyfJAvZXcmh:libera.chat?via=libera.chat&via=matrix.org&via=fedora.im #dns] | * [https://matrix.to/#/!DSZOxxZEyfJAvZXcmh:libera.chat?via=libera.chat&via=matrix.org&via=fedora.im #dns] - leads just to above IRC | ||
* [https://matrix.to/#/#dns:fedora.im #dns:fedora.im] - Fresh new empty room | |||
=== Mattermost === | |||
* [https://chat.dns-oarc.net/community/channels/town-square DNS-OARC Mattermost] | |||
=== Members === | |||
* [https://accounts.fedoraproject.org/group/dns-sig/ dns-sig group] | |||
[[Category:SIGs]] | [[Category:SIGs]] | ||
[[Category:Fedora special-interest groups|DNS SIG]] | [[Category:Fedora special-interest groups|DNS SIG]] | ||
Latest revision as of 22:10, 3 January 2024
Domain Name Services Special Interest Group
Goal
Improve and collaborate on name resolution servers and clients working on Fedora.
Topics
- DNS client tools
- DNSSEC deployment on both server and clients
- Common DNS cache configuration
- Networking/NameResolution
- Networking/Ideas/NetworkNameResolution
- Changes/DNS Over TLS
- Changes/Default Local DNS Resolver
- How to enable DNS over TLS on implementation-indepepdendent way?
Infrastructure
- DNS sysadmin guide - description of infrastructure used for Fedora
- Fedora server dnsmasq article
IETF Standards
- Domain Name System Operations (dnsop) group documents
- Adaptive DNS Discovery (add) group documents
- DNS PRIVate Exchange (dprive) group documents
- DNS Extensions (dnsext) group documents (concluded)
- Multiple Interfaces (mif) group documents (concluded)
- Extensions for Scalable DNS Service Discovery (dnssd) group documents
- ICANN annotations
Implementations
Universal
- bind9 - pkg:bind, pkg:bind9-next, upstream, upstream source docs
- in RHEL 7+
- Feature matrix
- bind9 Mattermost channel
Recursive
- knot-resolver - pkg:knot-resolver, upstream,docs, upstream source
- powerdns-recursor - pkg:pdns-recursor, upstream, upstream source
- unbound - pkg:unbound, upstream, upstream source
- in RHEL 7+
Stub resolvers
- dnsmasq - pkg:dnsmasq, upstream, upstream source
- in RHEL 7+
- stubby - pkg:stubby, upstream source
- DNS over TLS
- systemd-resolved - pkg:systemd, upstream, upstream source
- in RHEL 8+ (Tech. preview)
- Default in Fedora Workstation and Fedora Server
- dnsdist - pkg:dnsdist upstream
- DNS over TLS + DNS over HTTPS forwarding support
- Load-balancer, can be used as a stub too.
- Does not cache in default configuration
Authoritative
Benefit to Fedora
A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol.
Packages included
- dns-sig group sources
- packager dashboard - bugs summary for packages in DNS SIG
Communication
Mailing list
IRC
#dnschannel on Libera.Chat- dns-channel resources
Matrix
- #dns - leads just to above IRC
- #dns:fedora.im - Fresh new empty room