KINDNS Recursive Server Operational Best Practices

Recursive Server for Enterprise Network, ISPs (Not Public & Open Resolvers)

1. Best Practices
   
   
1. Hardening the Service Environment
   
   
1. Must 
   1. Limit Access
   2. Enable DNSSEC Validation
      
      
2. Should
   1. Enable QNAME Minimization
      
      
3. May
   1. Enable DoT
   2. Enable DOH
   3. NSEC Cashing (if validation is enabled)
      
2. Establishing Implementation Guidelines
1. How-Tos
2. Checklists
3. Configuration Processes
4. Examples