Resolver, but in 'forwarding' mode?
-
What is the difference between using DNS resolver with the 'query forwarding' box checked and using DNS forwarder?
-
@tknospdr At the base level of "want DNS to work," not much.
Forwarder was replaced a long time ago. I don't recall offhand if it does any caching, I think not? You can compare the options in pfSense's GUI to get a sense of options.
Unbound/Resolver has a "view" feature. It has DNSSEC, though that should be disabled while forwarding. DHCP lease registration. Etc.
-
@tknospdr said in Resolver, but in 'forwarding' mode?:
with the 'query forwarding' box checked and
... and given some DNS servers to forward to :
Not a lot of difference. The functionality is the same.
dnsmasq, the original (before 2012 ?) forwarder is still there for historical reasons.
pfSense started to include Unbound, the resolver, as there are no more good reasons (advantages) to forward to some given = ISP (or chosen by you) corporate DNS server. It's 2025 now, so you can tap into the original "DNS system" that Internet offers you. In short : you can take the info from the source, and you don't need an intermediate services anymore.
You've seen it yourself how good it is : when you installed pfSense, before you changed anything, 'DNS' worked. So no more need to forwards to some other resolver.Resolving means it will use DNSSEC if avaible.
Still, you can chose what method you want to use.
Both methods have their advantages.
My point of view is : Netgate has chosen a default setup with a resolver for a reason.
