Comment

Ah, unbound has the root DNS servers hard coded. That’s a significant point.

Any reason you couldn’t do the same with any other DNS server such as PiHole?

I’m really trying to understand why I’d run two DNS servers in serial, instead of one. All this sounds like it’s just a different config that’s been built in - is there something else I’m missing that unbound does differently?

source

Sort:hotnew top

InnerScientist@lemmy.world ⁨2⁩ ⁨days⁩ ago
Because pi-hole asks the configured DNS the whole domain, the root server will promptly <access denied> because that’s not how DNS is supposed to work.

There’s a difference between asking about the individual domain parts of the domain to the corresponding authorative DNS server and just sending the whole thing to a root server. If you did that then the root server would get ddosed to death.
Pi-hole can’t ask the root servers, it can only forward. Unbound can forward or be authorative or ask the root servers or do all of those at once.

source