Re: Jessie release goal: DNSSEC as default recursive resolver

[Kristof Provost <kristof@sigsegv.be>]

On 2013-10-29 22:03:59 (+0800), Thomas Goirand <zigo@debian.org> wrote:
> On 10/29/2013 03:42 AM, Wouter Verhelst wrote:
> > There's also no reason why you _need_ a local DNS server to be able to
> > do DNSSEC resolving; you can theoretically use a stub resolver (though
> > I'm not sure if there's a stub resolver in Debian which supports doing so).
> 
> Is there any stub resolver out there (even not in Debian, but of course
> free software) that does this? Could you point to an URL of that kind of
> upstream software?
> 
I believe unbound can already do this, if it's configured to.
See unbound.conf(5), specifically the 'Forward Zone Options' bit.

The following config stanza should forward all requests (except the
cached ones) to 1.2.3.4:

name: "."
  forward-addr: 1.2.3.4

Regards,
Kristof