DNSTap.

Administrators want to know about the queries their DNS server is working on, and about the responses sent back to clients. Using traditional logging (to file or syslog) is resource intensive and can slow down the whole DNS server.

DNSTAP is a new open technology, reading DNS server state events directly from the core of the DNS server, and making sure that performance loss is minimal while instrumentation is enabled.

The webinar shows DNSTAP implementation in Knot-DNS and Unbound, together with available tools to analyze the DNSTAP datastream.