If you need DNSEC validation you must use recursor, dnsdist cannot do that. Others might reflect on the dnsdist cache performance and hit ratio's compared to recursor's packet cache and/or record cache. Donote that dnsdist cache is more like the recursor's packet cache.
Thanks for confirming my understanding there. best regards, Christoph _______________________________________________ Pdns-users mailing list [email protected] https://mailman.powerdns.com/mailman/listinfo/pdns-users
