KINDNS Recursive Server Operational Best Practices

Recursive Server for Enterprise Network, Cable Service, VPN

1. Best Practices
1. Hardening the Operating Environment
1. Service
1. Must 
1. Limit Access
2. Enable DNSSEC Validation
2. May
1. Enable Encrypted Look-Up (DNS-over-TLS)
2. Enable DOH
2. System
1. Must
1. Limit Access
2. Limit Services to Need 
2. Should
1. Document implementation
2. Maintain Version Control
3. Monitoring Service performance, Intrusions, Errors, etc
3. Network
1. Must
1. Limit Access
2. Limit Services to Need 
2. Should
1. Documentation
2. Version Control
3. Monitoring for Intrusions, Errors, etc
2. Establishing Implementation Guidelines
1. How-Tos
2. Checklists
3. Configuration Processes
4. Examples