[Dnsmasq-discuss] local dns setup

[Lonnie Abelbeck]

On Apr 14, 2014, at 11:17 AM, Stéphane Guedon wrote:

> Hello
> 
> I have written a huge tutorial/article on my blog, and dnsmasq is one 
> of the main topic.
> 
> You may find it here :
> 
> http://www.22decembre.eu/2014/04/14/local-dns-setup-with-dnsmasq-nsd-and-unbound/

While sharing "forest from the trees" DNS strategies, my current approach...


[ Untrusted ] --------------- [ Router/Firewall ] --------------- [ Trusted ]

(Validated DNS Cache[1]) -- (DNSCrypt[2] + dnsmasq) -- (DNS:53 clients)

[1] Resolver + dnscrypt-wrapper[3], OpenDNS, etc.

[2] http://dnscrypt.org/

[3] https://github.com/Cofyc/dnscrypt-wrapper

Thereby DNSSEC is only used (needed) in the cloud validation.

Lonnie