Regarding using dnsmasq rather than knot resolver, on this thread:
… a cz.nic person said:
Which is - in my experience - true. TO is more flaky, especially with updates, if dnsmasq is used instead of kresd. But that kresd is slower than dnsmasq and doesn’t support CNAMEs.
I’m not bitter about it, it just wasn’t what I expected when I indiegogo’d.