DNS

From Kicksecure
Jump to navigation Jump to search

DNS

Documentation for this is incomplete. Contributions are happily considered! See this for potential alternatives.

Default DNS Configuration[edit]

kicksecure-network-confarchive.org

Linux Default DNS Mechanism[edit]

On Linux, DNS libraries read the /etc/resolv.conf file. A DNS-resolving client such as Unbound is optional and not strictly required for basic DNS resolution.

/etc/resolv.conf[edit]

  • Purpose: The /etc/resolv.conf file is a standard configuration file in Linux systems used by DNS resolver libraries (like glibc) to determine how to perform DNS resolution.
  • Contents: It typically contains information such as:
    • nameserver directives specifying the IP addresses of DNS servers.
    • search domains and options for resolving queries.

DNS Resolver Libraries[edit]

  • These libraries are part of most Linux systems and use /etc/resolv.conf to send DNS queries to the specified nameservers.
  • The libraries themselves handle basic DNS resolution without needing an external DNS resolver client.

DNS Resolver Clients[edit]

E.g., unbound, systemd-resolved.

  • Optional: External DNS resolving software like unbound or systemd-resolved is not strictly required for basic DNS resolution.
  • Purpose: These tools provide additional functionality, such as caching, advanced DNSSEC validation, or recursive DNS resolution.
  • Integration: When such a resolver is used, /etc/resolv.conf might point to 127.0.0.1 (localhost), as the local resolver handles DNS queries before forwarding them.

Summary[edit]

  • Basic DNS resolution on Linux relies on resolver libraries using /etc/resolv.conf.
  • External DNS resolving clients like unbound are optional and primarily used to enhance DNS functionality. They are not required for basic operations if a valid nameserver is defined in /etc/resolv.conf.

Enabling systemd-resolved[edit]

Untested!

Testers only! Warning: This is for testers-only!

sudo touch /etc/dns-enable

sudo apt install systemd-resolved

sudo systemctl enable systemd-resolved

sudo systemctl start systemd-resolved

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!