Hello.
On 3/21/21 10:04 PM, Alex JOST wrote:
What are the downsides of having a recursive DNS
server in front of an
authoritative DNS Server? I'm wondering if all the points listed in
the linked article are relevant for small scale installations.
"in front"? That sounds like some misunderstanding, either on your side
or mine - perhaps I didn't get what you want to achieve?
Authoritatives and recursives provide a different kind of service and to
different "clients"; on a quick look I see that in the article though.
Historically I think both functions were commonly done by a single
service - BIND/named can still do it - but nowadays it's recommended to
run them separately. (Well, injecting a few "authoritative"
modifications of DNS inside a recursive server seems OK, but that's a
bit different.)
--Vladimir