Excessive DNS lookups for _http._tcp.pkg.pfsense.org after 2.3 upgrade
-
Ouch, that's bad… What is the situation anyway with the DNS forwarders, isn't DNSMasq a bit redundant since it's not doing anything that Unbound can't do?
-
@kpa:
What is the situation anyway with the DNS forwarders, isn't DNSMasq a bit redundant since it's not doing anything that Unbound can't do?
No, that's not true. dnsmasq can do things that Unbound can't, and vice versa. There are also behavior differences between them, which is why we didn't force everyone to Unbound.
-
One thing off the top that dnsmasq can do that unbound can not is do localized responses.. Not aware that unbound can do that? Pretty sure dnsmasq will send queries to all dns servers listed and use the fasted response. I believe the way unbound does it is sequential?
As cmb states there are differences in for sure.. dnsmasq is by design a forwarder, while out of the box unbound is meant to be a resolver while it can be put in forwarder mode that is not where it shines so having both available for sure makes better choices for pfsense. Now if they had an authoritative dns that would be the homerun like bind..