<div dir="ltr">I wrote a script to expose stats from unbound to SNMP and built a Cacti template for that. Recently started moving the DNS stats to feed into Telegraf that pushes to an InfluxDB server, then built a dashboard in Grafana. We track DNS RTT for a few queries, number of drops, number of rejects, various record type requests per second, etc. We also have a Nagios plugin that checks each of our DNS cache resolving servers scattered across the network to ensure they can resolve a handful of popular domains.<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><table style="padding:0px;margin:10px 0;border:none"><tbody><tr><td style="vertical-align:middle;padding:0 7px 0 0"><img height="75" src="https://storage.googleapis.com/signaturesatori/customer-C00m2oio5/images/companyLogo/1fa8e8e24a4eb418cfea25c0d0d771b164eedd2b6df0467b4459358672c22eac.gif"></td><td style="border-left:3px solid #e8e8e8;padding:7px 0 0 10px">
                        <div style="font-family:'tahoma',sans-serif;font-size:14px;line-height:17px;font-weight:bold;color:black">Adam Kennedy</div>

                        <div style="font-family:'tahoma',sans-serif;font-size:12px;line-height:14px;font-weight:normal;color:black;margin-bottom:10px">Systems Engineer</div>

                        <div style="font-family:'tahoma',sans-serif;font-size:12px;line-height:14px;font-weight:normal;color:black;margin-bottom:10px"><a href="mailto:adamkennedy@watchcomm.net" style="text-decoration:none;color:#134865" rel="nofollow" target="_blank">adamkennedy@watchcomm.net</a> <span style="color:#969696">|</span> <a href="tel:800-589-3837;120" rel="nofollow" target="_blank">800-589-3837 x120</a></div>

                        <div style="font-family:'tahoma',sans-serif;font-size:12px;line-height:14px;color:black">Watch Communications <span style="color:#969696">|</span> <a href="https://www.watchcomm.net?utm_source=signature&utm_medium=email&utm_campaign=general_signature" style="text-decoration:none;color:#134865" rel="nofollow" target="_blank">www.watchcomm.net</a></div>

                        <div style="font-family:'tahoma',sans-serif;font-size:12px;line-height:14px;font-weight:normal;color:black;margin-bottom:10px">3225 W Elm St, Suite A<br>Lima, OH 45805</div>
                        <a href="https://twitter.com/watchcommnet" rel="nofollow" target="_blank"><img src="https://storage.googleapis.com/signaturesatori/icons/twitter.png"></a>  <a href="https://www.facebook.com/watchcommunications" rel="nofollow" target="_blank"><img src="https://storage.googleapis.com/signaturesatori/icons/facebook.png"></a>   <a href="http://www.linkedin.com/company/watch-communications" rel="nofollow" target="_blank"><img src="https://storage.googleapis.com/signaturesatori/icons/linkedin.png"></a>  </td></tr></tbody></table>
</div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, May 18, 2020 at 11:47 PM Justin Wilson (Lists) <<a href="mailto:lists@mtin.net">lists@mtin.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">        What are you folk doing to validate your DNS cache server configs and operation? In other words, what are you doing to make sure they are performing well, not just alive.<br>
<br>
        Justin<br>
—<br>
<a href="https://blog.j2sw.com" rel="noreferrer" target="_blank">https://blog.j2sw.com</a></blockquote></div>