<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi Otto,<div><br></div><div>Thank you, good to know. I use dnsdist at my clients but am working on my lab at the moment where I don’t yet have have dnsdist deployed.</div><div><br><div>
<meta charset="UTF-8"><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div>-- <br><b>Djerk Geurts</b></div><div><br></div></div></div><div><blockquote type="cite"><div>On 9 May 2023, at 13:47, Otto Moerbeek <otto@drijf.net> wrote:</div><br class="Apple-interchange-newline"><div><div>On Tue, May 09, 2023 at 01:34:51PM +0100, Djerk Geurts via Pdns-users wrote:<br><br><blockquote type="cite">Hi all,<br><br>Had a look and the only thing I could find is that DoT apparently is enabled when configuring PowerDNS-recursor with specific upstream servers on port 853.<br><br>Being relatively new to DoT and DoH I’m trying to work out why I can’t configure the recursor to listen to port 853 without configuring a specific forwarder. It looks like this is possible for dnsdist, so why not recursor, or am I missing something?<br></blockquote><br>Recursor 4.8 has a way to discover if an auth supports DoT. See<br>https://blog.powerdns.com/2022/06/13/probing-dot-support-of-authoritative-servers-just-try-it/<br><br>Recursor has no incoming DoT or DoH, because it is easy to use dnsdist<br>in front of Recursor for that. So there is little incentive to add<br>that functionality to the Recursor itself.<br><br><span class="Apple-tab-span" style="white-space:pre"> </span>-Otto<br></div></div></blockquote></div><br></div></body></html>