Versions Compared

Version Old Version 6 New Version 7
Changes made by

David Huberman

Adiel Akplogan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Recursive Server for Enterprise Network, ISPs (

...

Close &

...

Private  Resolvers)

  1. Best Practices

    1. Hardening the Service Environment

      1. Must 
        1. Limit Access
        2. Enable DNSSEC Validation

      2. Should
        1. Enable QNAME Minimization

      3. May
        1. Enable DoT
        2. Enable DOH
        3. NSEC Caching (if validation is enabled)

    2. General Considerations
      1. Hardening the System Environment
      2. Hardening the Network Environment

    3. Establishing Implementation Guidelines
      1. How-Tos
      2. Checklists
      3. Configuration Processes
      4. Examples