Disabling the forwarding in foris/config/dns/ makes the name resolving very slow. I think it is because I don’t have the IPv6 connectivity. Disabling manually
option net_ipv6 '0' in /etc/config/resolver makes it fast again.
I’ve measured the DNS response time by namebench on a Linux client:
option net_ipv6 '1': average 482 ms
option net_ipv6 '0': average 25 ms
The manual setting comes from an old thread. Should not Knot resolver somehow automatically detect there is no IPv6 connectivity and use the IPv4? Or should not Turris set automatically the
option net_ipv6 '0' for example when you hit the test button on foris/config/dns/ page and Turris knows, there is no IPv6 connectivity?
And last question, why the “forward” is the recommended option in foris/config/dns/? Is it just due to the performance? My ISP DNS has a problem with DNSSEC and I don’t like the idea of sending all my DNS requests to e.g. Google.
So I would recommend “forward” off for privacy and security. Moreover it seems the forwarding is actually not faster (although the numbers can vary due to the caching).
Forwarding on: average 75 ms