PowerDNS Recursor

Azure Networking

PowerDNS Recursor, a high performance standards compliant recursive DNS resolver that answers queries for your clients from a fast in memory cache.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

PowerDNS Recursor is an open source recursive DNS resolver. Unlike an authoritative server, which publishes the zones you own, a recursor resolves names on behalf of your clients: it walks the DNS hierarchy from the root servers down, follows delegations, validates DNSSEC signed answers, and caches results so repeat lookups are answered instantly. It is the resolver you point your workloads, containers and networks at instead of a public resolver, keeping your DNS traffic private and under your control. It supports RPZ response policy zones for DNS firewalling, Lua scripting for custom policy, and a full REST API for metrics and cache management.

Why the cloudimg image

The cloudimg image is hardened and fully patched with the Recursor preconfigured secure by default: recursion is restricted to loopback and RFC1918 private ranges so the instance can never be abused as an open resolver for DNS amplification, and adding your own client subnets is a single documented change. A unique REST API key and webserver password are generated on first boot so no default credentials ship, the management API and status webserver bind to loopback only, and every instance is backed by a paired deployment guide and 24/7 cloudimg support.

Common uses

  • Private recursive DNS for your networks
  • DNSSEC validating caching resolver
  • RPZ threat filtering and DNS firewalling