Maintained by: NLnet Labs

[Unbound-users] Feature Request for Unbound: Orientation

Ed - 0x1b, Inc.
Thu Sep 15 04:53:54 CEST 2011


I have a feature request for Unbound: Orientation

Could Unbound use the same DNSSEC methods that confirm the root name
servers to also confirm that an authoritative server on the local
network segment is affirmatively authoritative, private or fqdn?  What
this tells me is that my system knows for certain that it is in a
particular network and domain. If so, it can change the firewall rules
and run services as well as scripts for synchronization, etc...  These
are all things I would only want to do if I were on my own network. Or
maybe I would want to do them differently depending on my system's
network/domain orientation. This is a question more and more systems
will face, and I think Unbound can be the best way to know where one
is in these networks.

As a bonus, if Unbound could communicate the system's orientation by
way of D-bus it would be even more useful.  [re: systemd?]

I understand that eventually unbound may want to be able to deal with
subnets or non-local authoritative name servers, but first I hope to
hear if this feature request does what I think it does. or is this
done by something else already?

So, is this something Unbound might want to do? is it useful?

Thanks - Ed