Tenta DNS
Infrastructure
dns server
SHOW HN2017
How HN took it
3 positive, 17 neutral or asking, 0 mixed, 6 critical, out of 26 comments about the project. Thread score -0.05.
Idea: 2 for, 1 againstExecution: 0 for, 3 againstDesign: 1 for, 1 againstPerformance: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Single binary with BGP, TLS and recursion in one place is convenient
From 2 comments
Well, we didn't rewrite BGP in go, we used the excellent OSRG library for that. We played with several of the open source BGP libraries, but these inevitably result in a giant…
tenta on HNBGP integration and nSnitch, both are nice adds.
bogomipz on HN
Memory safety and concurrency of Go
From 1 comment
PowerDNS provides the standard by which other DNS resolvers are judged. It's an amazing, stable product. Our biggest features compared to PowerDNS are that we provide…
tenta on HN
Objections
Authoritative features are minimal compared to PowerDNS and Knot
From 2 comments
PowerDNS provides the standard by which other DNS resolvers are judged. It's an amazing, stable product. Our biggest features compared to PowerDNS are that we provide…
tenta on HNKnot DNS is authoritative only. Our main focus has been recursive support and full security support. We haven't used knot dns, but it has an excellent reputation. At the moment,…
tenta on HN
Mixing authoritative and recursive roles in one process is risky
From 1 comment
I'll put on my djb hat here, I'd avoid combining authoritative and recursive resolving servers in the same process. That is, unless you want to end up like bind.
scurvy on HN
Performance and slow resolution of new names
From 1 comment
I've tried using the DNS listed in the page and they were very slow resolving new names (I'm in Spain). DNS Benchmark (https://www.grc.com/dns/benchmark.htm) shows this results:…
pozibrothers on HN
Requests
Support for dnscrypt
From 1 comment
I know DNS over TLS is basically the same, but any plans to integrate dnscrypt too?
kim0 on HN
JSON file backend for authoritative zones
From 1 comment
For me the authoritative support would be relevant. Can you please elaborate on what important thing is missing? What's a recommended way of using your product in a redundant…
nik736 on HN
Questions
How does it compare to trust-dns, CoreDNS, PowerDNS, Unbound and Knot
From 5 comments
Apart from the difference in programming language, how does this compare to https://github.com/bluejekyll/trust-dns ?
hsivonen on HNSee also: https://coredns.io/ (also Go)
wiradikusuma on HNHow does it compare to PowerDNS?
nik736 on HNHow does this stack up against Unbound?
GuyPostington on HNIf we're already at it comparing different implementations, how's your story versus Knot (https://www.knot-dns.cz/)? Probably a different focus: Knot is authoritative-only, while…
dbrgn on HN
Does it handle automatic zone signing
From 1 comment
Does Tenta handle automatic zone signing? can tenta handle ECC param files for hardening elliptic implementations? Why the JSON logging if this is only a recursive unless you…
nimbius on HN
Alternatives named
trust-dns
From 1 comment
Apart from the difference in programming language, how does this compare to https://github.com/bluejekyll/trust-dns ?
hsivonen on HN
CoreDNS
From 1 comment
See also: https://coredns.io/ (also Go)
wiradikusuma on HN
PowerDNS
From 1 comment
How does it compare to PowerDNS?
nik736 on HN
Knot DNS
From 1 comment
If we're already at it comparing different implementations, how's your story versus Knot (https://www.knot-dns.cz/)? Probably a different focus: Knot is authoritative-only, while…
dbrgn on HN
Unbound
From 1 comment
How does this stack up against Unbound?
GuyPostington on HN