Project

General

Profile

Feature #9436

Unbound: enable dnstap support

Added by Ross Williams 8 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
DNS Resolver
Target version:
-
Start date:
03/27/2019
Due date:
% Done:

0%

Estimated time:
1.00 h

Description

dnstap support in Unbound would allow for query logging from pfSense with minimal performance impact. To implement a full (remote) query logging solution, additional packages will be required, but turning on --enable-dnstap for the build is a prerequisite. Advanced administrators could then add additional binaries to their installation to generate dnstap-based remote query logging. At some time in the future, remote query logging packages and GUI could be added.

dnstap support has been in Unbound for 5 years, since 1.5.0 and seen support and bugfixes over that time, despite the lack of documentation of the dnstap: clause in the unbound.conf manpage.

Also available in: Atom PDF