Jump to content
From ArchWiki

Related articles

- Domain name resolution

Knot Resolver is a full (recursive), caching DNS resolver. It is designed to scale from small home-office networks to providing DNS servers at the scale of ISPs. Knot Resolver supports DNSSEC, which is enabled by default.

## Installation

Install the knot-resolver package.

## Configuration

Start/enable `kresd@1.service`.

To use Knot Resolver as the local resolver, configure `127.0.0.1` as your nameserver (see see Domain name resolution).

By default, the resolver will listen on localhost, port `53`. If the resolver should be accessible from other hosts, configure other network interfaces in `/etc/knot-resolver/kresd.conf` with `net.listen()`. Refer to Knot Resolver documentation for more information.

Note: Unless you specifically want to run an open DNS resolver, do not configure the resolver to listen on a public (internet-facing) IP address.

If the resolver should respect entries from the `/etc/hosts` file, add a `hints.add_hosts()` line to `/etc/knot-resolver/kresd.conf`.

### Knot Resolver and dnsmasq

If dnsmasq is used for managing DHCP, then advertising a kresd instance works like any other external DNS server would: By adding an `dhcp-option=option:dns-server,<Server Address>` line to the dnsmasq configuration file.

Note that a default configuration of dnsmasq will clash with the default configuration of kresd, since both will attempt to use port `53`. Disable the dnsmasq DNS functionality (`port=0`), or assign a different port to either service.

## See also

- kresd(8)
- kresd.systemd(7)
- Knot Resolver documentation

Category:

- Domain Name System