4 ms·
Main data comes from unbound[1], I use vector[2] to ship and transform logs. Dnstap[3] log format IME works better than the standard logs, especially when it co
by VTimofeenko 10mo ago
Main data comes from unbound[1], I use vector[2] to ship and transform logs. Dnstap[3] log format IME works better than the standard logs, especially when it comes to more complex queries and replies. Undesired queries get 0.0.0.0 as a response which I track.
Firewall is based on hand-rolled nftables rules.
[1]: https://www.nlnetlabs.nl/projects/unbound/about/ https://www.nlnetlabs.nl/projects/unbound/about/
[2]: https://vector.dev https://vector.dev
[3]: https://dnstap.info/Examples/ https://dnstap.info/Examples/