Page MenuHomeVyOS Platform

DNS forwarding always requires an upstream recursor - but not needed with PowerDNS Recursor
Closed, ResolvedPublicBUG


The current DNS forwarding implementation using PowerDNS always requires specifying an upstream recorsor server by

  • set service dns forwarding name-server x.x.x.x

Without this setting /etc/powerdns/recursor.conf will contain

# name-server

which leads to not resolving any queries. We can make the name-server node optional and by this PowerDNS recursor will directly contact the root-zone. This can be done by removing forward-zones-recurse=.= from the generated /etc/powerdns/recursor.conf file.

@syncer @dmbaturin @UnicronNL please comment.


Difficulty level
Easy (less than an hour)
Why the issue appeared?
Design mistake

Event Timeline

syncer triaged this task as Normal priority.Nov 25 2018, 3:14 AM
syncer edited projects, added VyOS 1.2 Crux (VyOS 1.2.0-rc9); removed VyOS 1.2 Crux.

yes, make sense,
maybe we can do
set service dns forwarding name-server use-root-servers
or something similar

Or, if no name-server is set, use the root servers, this is the most easy implementation.

Could be done by Help text and documentation

Is the root hints file included in the package? I can't find it. Or it has a built-in list of root servers?

Eoot hints could be speciefied, if none is specified, buildin one is used.

Another idea (if having no name-server entries is disliked) would be

set service dns forwarding enable-recursor

Just hit this at my site, too.

Any additional thoughts?

I still think providing no name-server should fallback to full recurse

c-po changed Why the issue appeared? from Will be filled on close to Design mistake.