CoreDNS is still without first-class NSEC3 DNSSEC support right ? Last time I looked it needed a third-party community plugin. Not a good look. On Friday, 8 August 2025 at 18:51, Endre Szabo via NANOG <nanog@lists.nanog.org> wrote:
Hi,
I only can recommend CoreDNS for this use-case. Its plugin system is very easy to work with. I had a lot of fun times fiddling with wild ideas. But it’s written in Go, so ymmv.
—Endre
On 08.08.2025, at 19:19, William Herrin via NANOG nanog@lists.nanog.org wrote:
Can anyone recommend software for an authoritative DNS server where the open source code is clean and well documented? I have an anycast-related experiment I'd like to put together and I want to be able to quickly shoehorn it into existing code.
I looked at the source for ISC Bind but the code complexity is far beyond anything I'd want to touch for a casual experiment. Please don't use macros (#defines) to construct your C function definitions. I realize C allows it but it turns your code into a meta-language that no one else knows.
Regards, Bill Herrin
-- William Herrin bill@herrin.us https://bill.herrin.us/ _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/RG5JZ5LG...
_______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/ZQQF3WMP...