Summary
Create another binary that runs only the nameserver that responds on port 53 (and maybe DoH?).
Problem
- Reduce impact of DoS attacks over UDP 53 DNS.
- Registrars require at least 2 DNS nameservers
Impact
Otherwise we need a workaround, e.g. using PowerDNS as secondary nameservers.
Solution
Split out a binary that runs only the DNS parts of fission-server/main.rs.
Summary
Create another binary that runs only the nameserver that responds on port 53 (and maybe DoH?).
Problem
Impact
Otherwise we need a workaround, e.g. using PowerDNS as secondary nameservers.
Solution
Split out a binary that runs only the DNS parts of
fission-server/main.rs.