CoreDNS is still without first-class NSEC3 DNSSEC support right ? Last time I looked it needed a third-party community plugin. Not a good look.
On Friday, 8 August 2025 at 18:51, Endre Szabo via NANOG <[email protected]> wrote: > Hi, > > I only can recommend CoreDNS for this use-case. Its plugin system is very > easy to work with. I had a lot of fun times fiddling with wild ideas. But > it’s written in Go, so ymmv. > > —Endre > > > On 08.08.2025, at 19:19, William Herrin via NANOG [email protected] > > wrote: > > > > Can anyone recommend software for an authoritative DNS server where > > the open source code is clean and well documented? I have an > > anycast-related experiment I'd like to put together and I want to be > > able to quickly shoehorn it into existing code. > > > > I looked at the source for ISC Bind but the code complexity is far > > beyond anything I'd want to touch for a casual experiment. Please > > don't use macros (#defines) to construct your C function > > definitions. I realize C allows it but it turns your code into a > > meta-language that no one else knows. > > > > Regards, > > Bill Herrin > > > > -- > > William Herrin > > [email protected] > > https://bill.herrin.us/ > > _______________________________________________ > > NANOG mailing list > > https://lists.nanog.org/archives/list/[email protected]/message/RG5JZ5LGQKXL425BG7IB5VS2JZ6PPSLV/ > > > _______________________________________________ > NANOG mailing list > https://lists.nanog.org/archives/list/[email protected]/message/ZQQF3WMPRDJ7UOAJR42LE36WMQCOT64S/ _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/QHAVGKSNLWQY4HNXV22DOK3N3JZINUKZ/
