Latest revision as of 22:10, 3 January 2024

Domain Name Services Special Interest Group

Goal

Improve and collaborate on name resolution servers and clients working on Fedora.

Topics

DNS client tools
DNSSEC deployment on both server and clients
Common DNS cache configuration
Networking/NameResolution
Networking/Ideas/NetworkNameResolution
Changes/DNS Over TLS
Changes/Default Local DNS Resolver
How to enable DNS over TLS on implementation-indepepdendent way?

Infrastructure

DNS sysadmin guide - description of infrastructure used for Fedora
Fedora server dnsmasq article

IETF Standards

Domain Name System Operations (dnsop) group documents
Adaptive DNS Discovery (add) group documents
DNS PRIVate Exchange (dprive) group documents
DNS Extensions (dnsext) group documents (concluded)
Multiple Interfaces (mif) group documents (concluded)
Extensions for Scalable DNS Service Discovery (dnssd) group documents
ICANN annotations

Implementations

Universal

bind9 - pkg:bind, pkg:bind9-next, upstream, upstream source docs
- in RHEL 7+
- Feature matrix
- bind9 Mattermost channel

Recursive

knot-resolver - pkg:knot-resolver, upstream,docs, upstream source
powerdns-recursor - pkg:pdns-recursor, upstream, upstream source
unbound - pkg:unbound, upstream, upstream source
- in RHEL 7+

Stub resolvers

dnsmasq - pkg:dnsmasq, upstream, upstream source
- in RHEL 7+
stubby - pkg:stubby, upstream source
- DNS over TLS
systemd-resolved - pkg:systemd, upstream, upstream source
- in RHEL 8+ (Tech. preview)
- Default in Fedora Workstation and Fedora Server
dnsdist - pkg:dnsdist upstream
- DNS over TLS + DNS over HTTPS forwarding support
- Load-balancer, can be used as a stub too.
- Does not cache in default configuration

Authoritative

powerdns - pkg:pdns upstream
NSD - pkg:nsd, upstream
knot dns - pkg:knot, upstream source, upstream

Benefit to Fedora

A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol.

Packages included

dns-sig group sources
packager dashboard - bugs summary for packages in DNS SIG

Communication

Mailing list

dns-sig at Fedora

IRC

#dns channel on Libera.Chat
dns-channel resources

Matrix

#dns - leads just to above IRC
#dns:fedora.im - Fresh new empty room

Mattermost

DNS-OARC Mattermost

Members

dns-sig group

@@ Line 20: / Line 20: @@
 * [https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/dns/ DNS sysadmin guide] - description of infrastructure used for Fedora
 * [https://docs.fedoraproject.org/en-US/fedora-server/administration/dnsmasq/ Fedora server dnsmasq article]
+=== IETF Standards ===
+* [https://datatracker.ietf.org/wg/dnsop/documents/ Domain Name System Operations (dnsop)] group documents
+* [https://datatracker.ietf.org/wg/add/documents/ Adaptive DNS Discovery (add)] group documents
+* [https://datatracker.ietf.org/wg/dprive/documents/ DNS PRIVate Exchange (dprive)] group documents
+* [https://datatracker.ietf.org/wg/dnsext/documents/ DNS Extensions (dnsext)] group documents (concluded)
+* [https://datatracker.ietf.org/wg/mif/documents/ Multiple Interfaces (mif)] group documents (concluded)
+* [https://datatracker.ietf.org/wg/dnssd/documents/ Extensions for Scalable DNS Service Discovery (dnssd)] group documents
+* [https://rfc-annotations.research.icann.org/ ICANN annotations]
 == Implementations ==
@@ Line 38: / Line 48: @@
 * dnsmasq - [https://src.fedoraproject.org/rpms/dnsmasq/ pkg:dnsmasq], [https://dnsmasq.org/ upstream], [https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=summary upstream source]
 ** in RHEL 7+
+* stubby - [https://src.fedoraproject.org/rpms/stubby pkg:stubby], [https://github.com/getdnsapi/stubby upstream source]
+** DNS over TLS
 * systemd-resolved - [https://src.fedoraproject.org/rpms/systemd/ pkg:systemd], [https://systemd.io/ upstream], [https://github.com/systemd/systemd upstream source]
 ** in RHEL 8+ (Tech. preview)
 ** Default in Fedora Workstation and Fedora Server
-* stubby - [https://src.fedoraproject.org/rpms/stubby pkg:stubby], [https://github.com/getdnsapi/stubby upstream source]
+* dnsdist - [https://src.fedoraproject.org/rpms/dnsdist pkg:dnsdist] [https://dnsdist.org/ upstream]
-** DNS over TLS
+** DNS over TLS + DNS over HTTPS forwarding support
+** Load-balancer, can be used as a stub too.
+** Does not cache in default configuration
 === Authoritative ===
@@ Line 48: / Line 62: @@
 * powerdns - [https://src.fedoraproject.org/rpms/pdns pkg:pdns] [https://www.powerdns.com/powerdns-authoritative-server upstream]
 * NSD - [https://src.fedoraproject.org/rpms/nsd pkg:nsd], [https://www.nlnetlabs.nl/projects/nsd/about/ upstream]
-* knot dns - [https://src.fedoraproject.org/rpms/knot pkg:knot], [https://gitlab.nic.cz/knot/knot-dns upstream source]
+* knot dns - [https://src.fedoraproject.org/rpms/knot pkg:knot], [https://gitlab.nic.cz/knot/knot-dns upstream source], [https://www.knot-dns.cz/ upstream]
-=== Special ===
+== Benefit to Fedora ==
-* dnsdist - [https://src.fedoraproject.org/rpms/dnsdist pkg:dnsdist]
+A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol.
-== Benefit to Fedora ==
+=== Packages included ===
-A place to interact and collaborate on different open source implementations providing authoritative, recursive or just stub implementations using DNS protocol.
+* [https://src.fedoraproject.org/group/dns-sig dns-sig group sources]
+* [https://packager-dashboard.fedoraproject.org/dashboard?groups=dns-sig packager dashboard] - bugs summary for packages in DNS SIG
 == Communication ==

Search

SIGs/DNS: Difference between revisions