Hacker News Reader

You can query DNS root server. https://www.iana.org/domains/root/servers

And use long TTL time with large cache size.

Other than some small edge cases, this is pretty much the most secure and fastest DNS performance you will have, in most instances getting about 1 or <1ms speed. Depending on DNS server you can even have both root servers and resolver configured.

I have been using unbound for at least 4 years. Simple and fast.

View on HN

It is also very easy to do this with dnsmasq or powerdns, djbdns, etc.

I'm increasingly beginning to think that every node should be it's own dns so it's cache blacklist can be verified (checksums?) per node instead of per request to the dns provider.

Ok I'm going to try and set up Cloudflare's DNS setup in Go to point to those root servers and see what I get.

Is there a different DNS server you would recommend? I don't think my usage requires anything special.

BIND is the industry standard - but insanely overkill for your use case. Unbound is very easy and lightweight. Dnsmasq is another option, but I don't think you can setup root server with it.

Reply on news.ycombinator.com