OT - Small DNS "appliances" for remote offices.

Mel Beckman mel at beckman.org
Wed Feb 18 15:42:38 UTC 2015


We use Mac Minis; $500 each anywhere plus $25 (!) for all the server components, dead silent, and ready to go with Bind installed out of the box. You can also enable dhcpd and all manner of other stock BSD services. There are "helper" GUI tools for the non-CLI admin built into the Server toolkit. Way fast, extremely secure, and IPv6 ready. 

http://arstechnica.com/apple/2014/11/a-power-users-guide-to-os-x-server-yosemite-edition/11/

Yes, this hardware costs a bit more than the mini box Pcs,mbut you make up for that in reduced setup labor. 

 -mel beckman

> On Feb 18, 2015, at 7:22 AM, "Rob Seastrom" <rs at seastrom.com> wrote:
> 
> 
> Peter Kristolaitis <alter3d at alter3d.ca> writes:
> 
>> Not "industrial grade", but Raspberry Pis are pretty great for this
>> kind of low-horsepower application.  Throw 2 at each site for
>> redundancy and you have a low-powered, physically small, cheap, dead
>> silent, easily replaceable system for ~$150 per site.
> 
> The Pi is low-powered in more ways than one.  Last fall I ran some
> (admittedly fairly simple minded) DNS benchmarks against a Raspberry
> Pi Model B and an ODROID U3.
> 
> Particularly if you have DNSSEC validation enabled, the Pi is
> underwhelming in performance (81 qps in the validation case, 164
> without).
> 
> The U3 is circa 325 qps with or without DNSSEC validation on, which
> suggests that something else other than crypto-computes is the long
> pole in the tent.
> 
> I haven't gotten motivated to try this against the ODROID-C1 that I
> acquired later in December, nor have I sourced a Raspberry Pi 2.  For
> anyone who's feeling motivated to do this (please send along
> results!), the methodology I used is at http://technotes.seastrom.com/node/53
> 
> -r
> 
> PS: don't miss the opportunity to run real honest-to-god isc-dhcpd on
> same machine rather than whatever your router provides you; you'll be
> glad you did.
> 



More information about the NANOG mailing list