diff --git a/content/post/13-migration-opnsense-proxmox-highly-available.md b/content/post/13-migration-opnsense-proxmox-highly-available.md index 2433929..c8ae749 100644 --- a/content/post/13-migration-opnsense-proxmox-highly-available.md +++ b/content/post/13-migration-opnsense-proxmox-highly-available.md @@ -233,6 +233,18 @@ Finally, I want to allow anything from my trusted networks. In `Firewall` > `Rul | **Description** | Trusted | ### DNS + +For the DNS, I will use Unbound. It is a validating, recursive, caching DNS resolver built into OPNsense, which can: +- Resolve queries from the root servers. +- Cache results for faster responses. +- Check domain authenticity with DNSSEC. +- Add custom records. +- Register hostname of DHCP leases. +- Block domains based of blacklist. + +I + + ### DHCP ### VPN