[gentoo-user] DNS testing

[gentoo-user] DNS testing

[James]

Hello,

So I've been manually (hap-hazardly) testing a variety of dns servers by
just listing them first in /etc/resolv.conf. There seems to be a bit of buzz
about
OpenDNS and some other  dns servers as to speed and security.

What (automated) tools do we have on gentoo to profile various dns
server for speed?   Security?  Anything else?

I find myself using CLI and various tools and then the data is
not collected over time and averages. Surely there is some automated
tools for this? I'd like to get more pro-active on dns testing. Maybe
something more robust in nagios? munin?

Maybe the easiest thing to get something going is to alter mirrorselect? [1]
From a workstation with promiscuous ethernet. Eventually, I'd like the code(s)
running on a transparent bridge, if anyone has that sort of configuration
that you'd be willing to share?

[1] https://wiki.gentoo.org/wiki/Mirrorselect


curiously,
James

Re: [gentoo-user] DNS testing

[john]

On Tue, 24 May 2016 14:43:32 +0000 (UTC)
James <wireless@tampabay.rr.com> wrote:

> Hello,
> 
> So I've been manually (hap-hazardly) testing a variety of dns servers
> by just listing them first in /etc/resolv.conf. There seems to be a
> bit of buzz about
> OpenDNS and some other  dns servers as to speed and security.
> 
> What (automated) tools do we have on gentoo to profile various dns
> server for speed?   Security?  Anything else?
> 
> I find myself using CLI and various tools and then the data is
> not collected over time and averages. Surely there is some automated
> tools for this? I'd like to get more pro-active on dns testing. Maybe
> something more robust in nagios? munin?
> 
> Maybe the easiest thing to get something going is to alter
> mirrorselect? [1] From a workstation with promiscuous ethernet.
> Eventually, I'd like the code(s) running on a transparent bridge, if
> anyone has that sort of configuration that you'd be willing to share?
> 
> [1] https://wiki.gentoo.org/wiki/Mirrorselect
> 
> 
> curiously,
> James
> 
> 

namebench

is the tool that springs to mind

John

[gentoo-user] Re: DNS testing

[James]

john <jdm <at> jdm.myzen.co.uk> writes:

> > So I've been manually (hap-hazardly) testing a variety of dns servers

> namebench  is the tool that springs to mind


OK, that one addresses speed, on a test that is easily repeated. (thanks).

Any tools or such that test or rank security features of the dns (public)
servers?

Maybe a listing of the ones that are "hardened and use a better libc" like musl?


James