>>> Ok. But i needn't another authoritative server I have a such one - bind. >>> I just want that unbound set AA flag in the answer packages for my dns >>> zones. >>> >> >> Why? More specific: Why you need recursive server to return >> authoritative answer instead of using authoritative server? >> >> Ondrej >> > > I dont want to show my authoritative server (bind) to external > network(internet), because it's heavier > and slower than unbound. Therefore I want that unbound will answer all dns > requests, _cache_ them and > make "bind" life easier. I regard unbound as a cache layer before > authoritative server. > > internet > | > cache layer (unbound) > | > authoritative servers (bind) > > What do you think about such idea? :-)
That it's very bad idea. Use nsd if you want faster and lighter authoritative DNS server. You can still have bind as a master, just setup nsd as slave. Ondrej -- Ondřej Surý <[email protected]> http://blog.rfc1925.org/ _______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
