[{"data":1,"prerenderedAt":398},["ShallowReactive",2],{"project-15796943":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":44,"post_text":46,"what":47,"said":94,"maker_in_thread":196,"shape":209,"grid":213,"attempts":361,"same_week":362,"maker_shows":40,"maker_hidden":391,"reader_version":392,"card":393},"15796943","Tenta DNS","Golang DNS server, including DNSSEC and DNS-over-TLS","title","Show HN: Golang DNS server, including DNSSEC and DNS-over-TLS","https:\u002F\u002Fgithub.com\u002Ftenta-browser\u002Ftenta-dns","github.com","tenta",1511875266,2017,283,64,81,2242,4,"legend","infrastructure","dns server","other",[21,24,25,26,27],"dnssec","dns over tls","golang","recursive resolver","curious",-0.05,{"positive":31,"neutral":32,"mixed":33,"critical":34},3,17,0,6,26,{"design":37,"idea":39,"execution":41,"performance":42,"pricing":43},{"positive":38,"critical":38},1,{"positive":40,"critical":38},2,{"positive":33,"critical":31},{"positive":33,"critical":38},{"positive":33,"critical":33},[31,33,33,45,31,33,33,31,31,31,33,38,33,31,45,33,31,38,38,33,33,33,33,33,38,31,31,31,33,31,45,38,33,31,38,33,31,31,31,31],5,null,{"problem":48,"audience":46,"pricing":58,"motivation":66,"time_to_build":46,"stack":73,"openness":91,"stage":92,"team_size":93},{"value":49,"source":50,"evidence":51},"Running a secure, performant DNS resolver or authoritative server with DNS-over-TLS and BGP support","maker",[52,55],{"id":53,"by":11,"text":54},"15797805","PowerDNS provides the standard by which other DNS resolvers are judged. It's an amazing, stable product. Our biggest features compared to PowerDNS are that we provide…",{"id":56,"by":11,"text":57},"15798477","We natively work a BGP, making it easy and practical to do things like \"anycast\" (announcing the same IP address from multiple datacenters), or using BGP for load balancing or…",{"value":59,"source":60,"evidence":61},"Hosted recursive resolver is free to use in exchange for a backlink to Tenta browser","commenter",[62],{"id":63,"by":64,"text":65},"15797767","ploggingdev","You mentioned that the hosted recursive resolver is free to use along with api access in exchange for a backlink, and I checked out the parent project which is Tenta browser and…",{"value":67,"source":50,"evidence":68},"Provide DNS-over-TLS and secure recursion in one memory-safe server, as Tenta's privacy offering",[69,70],{"id":53,"by":11,"text":54},{"id":71,"by":11,"text":72},"15797943","Tenta browser business model is the opposite of most browsers. We don't care about ads. It's simply based on protecting data. We have a built-in VPN that's always free to use…",[74,81,85],{"value":75,"source":50,"evidence":76},"Go",[77,78],{"id":53,"by":11,"text":54},{"id":79,"by":11,"text":80},"15798689","Largely the same as vs PowerDNS. We've designed this to be an all-in-one for running a performant and secure server with BGP. However, we use the excellent miekg\u002Fdns library for…",{"value":82,"source":50,"evidence":83},"miekg\u002Fdns library",[84],{"id":79,"by":11,"text":80},{"value":86,"source":50,"evidence":87},"OSRG BGP library",[88],{"id":89,"by":11,"text":90},"15799297","Well, we didn't rewrite BGP in go, we used the excellent OSRG library for that. We played with several of the open source BGP libraries, but these inevitably result in a giant…","open_source","launched","company",{"praise":95,"objections":108,"requests":130,"questions":145,"alternatives":175},[96,104],{"value":97,"source":60,"evidence":98},"Single binary with BGP, TLS and recursion in one place is convenient",[99,100],{"id":89,"by":11,"text":90},{"id":101,"by":102,"text":103},"15797795","bogomipz","BGP integration and nSnitch, both are nice adds.",{"value":105,"source":50,"evidence":106},"Memory safety and concurrency of Go",[107],{"id":53,"by":11,"text":54},[109,116,123],{"value":110,"source":50,"evidence":111},"Authoritative features are minimal compared to PowerDNS and Knot",[112,113],{"id":53,"by":11,"text":54},{"id":114,"by":11,"text":115},"15797981","Knot DNS is authoritative only. Our main focus has been recursive support and full security support. We haven't used knot dns, but it has an excellent reputation. At the moment,…",{"value":117,"source":60,"evidence":118},"Mixing authoritative and recursive roles in one process is risky",[119],{"id":120,"by":121,"text":122},"15798158","scurvy","I'll put on my djb hat here, I'd avoid combining authoritative and recursive resolving servers in the same process. That is, unless you want to end up like bind.",{"value":124,"source":60,"evidence":125},"Performance and slow resolution of new names",[126],{"id":127,"by":128,"text":129},"15798445","pozibrothers","I've tried using the DNS listed in the page and they were very slow resolving new names (I'm in Spain). DNS Benchmark (https:\u002F\u002Fwww.grc.com\u002Fdns\u002Fbenchmark.htm) shows this results:…",[131,138],{"value":132,"source":60,"evidence":133},"Support for dnscrypt",[134],{"id":135,"by":136,"text":137},"15798860","kim0","I know DNS over TLS is basically the same, but any plans to integrate dnscrypt too?",{"value":139,"source":60,"evidence":140},"JSON file backend for authoritative zones",[141],{"id":142,"by":143,"text":144},"15797968","nik736","For me the authoritative support would be relevant. Can you please elaborate on what important thing is missing? What's a recommended way of using your product in a redundant…",[146,168],{"value":147,"source":60,"evidence":148},"How does it compare to trust-dns, CoreDNS, PowerDNS, Unbound and Knot",[149,153,157,160,164],{"id":150,"by":151,"text":152},"15798696","hsivonen","Apart from the difference in programming language, how does this compare to https:\u002F\u002Fgithub.com\u002Fbluejekyll\u002Ftrust-dns ?",{"id":154,"by":155,"text":156},"15797447","wiradikusuma","See also: https:\u002F\u002Fcoredns.io\u002F (also Go)",{"id":158,"by":143,"text":159},"15797552","How does it compare to PowerDNS?",{"id":161,"by":162,"text":163},"15798456","GuyPostington","How does this stack up against Unbound?",{"id":165,"by":166,"text":167},"15797881","dbrgn","If we're already at it comparing different implementations, how's your story versus Knot (https:\u002F\u002Fwww.knot-dns.cz\u002F)? Probably a different focus: Knot is authoritative-only, while…",{"value":169,"source":60,"evidence":170},"Does it handle automatic zone signing",[171],{"id":172,"by":173,"text":174},"15797917","nimbius","Does Tenta handle automatic zone signing? can tenta handle ECC param files for hardening elliptic implementations? Why the JSON logging if this is only a recursive unless you…",[176,180,184,188,192],{"value":177,"source":60,"evidence":178},"trust-dns",[179],{"id":150,"by":151,"text":152},{"value":181,"source":60,"evidence":182},"CoreDNS",[183],{"id":154,"by":155,"text":156},{"value":185,"source":60,"evidence":186},"PowerDNS",[187],{"id":158,"by":143,"text":159},{"value":189,"source":60,"evidence":190},"Knot DNS",[191],{"id":165,"by":166,"text":167},{"value":193,"source":60,"evidence":194},"Unbound",[195],{"id":161,"by":162,"text":163},{"comments":197,"answered":198,"key":199},20,14,[200,203,206],{"id":201,"text":202},"15798780","This appears to be in the same universe (DNS with TLS in a shiny new language). It looks like Tenta DNS currently supports more features around scaling and production use, while…",{"id":204,"text":205},"15797822","thanks! We appreciate it. Yeah mainly not open source and AFAIK, it's authoritative only.",{"id":207,"text":208},"15798100","authoritative features we don't support yet. We have a slack webhook to help us know when it's running and when it's not. It lets us know if we have server errors. All anonymous…",{"commenters":210,"max_depth":34,"maker_replies":197,"first_comment_mins":211,"lifespan_hours":212},31,44,160,[214,216,217,221,224,228,229,232,236,238,241,243,244,247,248,249,250,251,253,256,259,262,266,268,270,272,276,279,283,285,288,290,293,296,298,301,303,305,308,310,313,315,317,318,319,322,324,326,327,329,332,333,335,337,340,341,345,347,349,351,353,356,358,360],[150,33,31,215,151,33],"project\u002Fneutral\u002Fnone",[201,33,33,215,11,38],[218,33,33,219,220,33],"15799066","commenter\u002Fneutral\u002Fnone","bluejekyll",[222,33,33,223,220,33],"15798966","other\u002Fneutral\u002Fnone",[225,38,45,226,227,33],"15797345","maker\u002Fpositive\u002Fdesign","kanwisher",[204,38,33,215,11,38],[230,38,31,215,231,33],"15797843","dullgiulio",[233,38,33,234,235,33],"15800096","other\u002Fneutral\u002Fperformance","iangudger",[237,38,33,223,231,33],"15801091",[239,38,33,234,240,33],"15805402","lmb",[242,38,33,223,240,33],"15805399",[154,40,31,215,155,33],[245,40,33,223,246,33],"15797523","zaarn",[165,31,31,215,166,33],[172,31,31,215,173,33],[207,31,33,215,11,38],[114,31,33,215,11,38],[120,31,38,252,121,33],"project\u002Fcritical\u002Fdesign",[254,31,33,255,11,38],"15798508","project\u002Fneutral\u002Fdesign",[257,31,33,223,258,33],"15798603","cat199",[260,31,33,223,261,33],"15799611","pouetpouet",[263,18,31,264,265,33],"15797716","project\u002Fneutral\u002Fidea","sleepybrett",[267,18,33,264,11,38],"15797777",[101,18,45,269,102,33],"project\u002Fpositive\u002Fidea",[271,18,33,215,11,38],"15797962",[273,45,31,274,275,33],"15799358","project\u002Fneutral\u002Fexecution","roguecoder",[277,45,31,274,278,33],"15799388","pokstad",[280,45,38,281,282,33],"15799414","project\u002Fcritical\u002Fexecution","alpb",[284,45,33,274,11,38],"15799488",[286,45,38,281,287,33],"15803431","sagichmal",[289,45,33,274,11,38],"15799515",[291,45,33,223,292,33],"15801189","tptacek",[294,45,33,223,295,33],"15802909","pvg",[297,45,33,223,292,33],"15803147",[299,45,33,223,300,33],"15822298","fulafel",[302,45,33,223,295,33],"15841708",[304,45,33,223,300,33],"15849993",[306,45,33,223,307,33],"15805865","ubernostrum",[127,34,38,309,128,33],"project\u002Fcritical\u002Fperformance",[311,34,33,312,11,38],"15798554","project\u002Fneutral\u002Fperformance",[314,34,31,312,128,33],"15803487",[158,316,31,215,143,33],7,[53,316,33,269,11,38],[142,316,31,215,143,33],[320,316,33,223,321,33],"15798490","Habbie",[323,316,33,215,11,38],"15798602",[325,316,31,264,121,33],"15798146",[56,316,33,264,11,38],[328,316,45,269,292,33],"15798881",[330,316,38,331,121,33],"15798884","project\u002Fcritical\u002Fidea",[89,316,33,255,11,38],[334,316,33,223,321,33],"15798494",[336,316,33,223,11,38],"15798625",[63,338,31,339,64,33],8,"project\u002Fneutral\u002Fpricing",[71,338,33,339,11,38],[342,343,38,281,344,33],"15797417",9,"a012",[346,343,33,274,11,38],"15797477",[348,343,31,274,344,33],"15797595",[350,343,33,274,11,38],"15797853",[135,352,31,264,136,33],10,[354,352,31,355,220,33],"15798995","maker\u002Fneutral\u002Fidea",[357,352,33,264,11,38],"15799224",[161,359,31,215,162,33],11,[79,359,33,215,11,38],[],[363,368,373,377,382,387],{"id":364,"name":365,"points":366,"category":367},"15765762","Nebula",345,"productivity",{"id":369,"name":370,"points":371,"category":372},"15810244","Promptui",196,"languages",{"id":374,"name":375,"points":376,"category":372},"15809291","stream-audio-fingerprint",158,{"id":378,"name":379,"points":380,"category":381},"15785333","Ondevice SSH",152,"dev_tools",{"id":383,"name":384,"points":385,"category":386},"15793156","3D Game Programming",109,"learning_science",{"id":388,"name":389,"points":390,"category":386},"15795682","Angelic-hierarchy",95,false,"v2",{"id":394,"name":5,"line":6,"ai":391,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":395,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":396,"url":9,"mix":397,"praise":97,"objection":110,"sub":21},15796943,[21,24,25,26,27],"3005300333010350311000001333035103103333",[31,32,33,34],1794036561233]