From owner-freebsd-questions@FreeBSD.ORG  Wed Aug  6 14:31:51 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 2498AA2F
 for <freebsd-questions@freebsd.org>; Wed,  6 Aug 2014 14:31:51 +0000 (UTC)
Received: from luigi.brtsvcs.net (luigi.brtsvcs.net
 [IPv6:2607:fc50:1000:1f00::2])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 03734244A
 for <freebsd-questions@freebsd.org>; Wed,  6 Aug 2014 14:31:50 +0000 (UTC)
Received: from chombo.houseloki.net (c-73-37-112-64.hsd1.or.comcast.net
 [73.37.112.64])
 by luigi.brtsvcs.net (Postfix) with ESMTPSA id 0A2692D4F9F;
 Wed,  6 Aug 2014 07:31:49 -0700 (PDT)
Received: from [IPv6:2601:7:2280:38b:baca:3aff:fe83:bd29] (unknown
 [IPv6:2601:7:2280:38b:baca:3aff:fe83:bd29])
 by chombo.houseloki.net (Postfix) with ESMTPSA id 6FA7531F;
 Wed,  6 Aug 2014 07:31:47 -0700 (PDT)
Message-ID: <53E23C4E.5090702@bluerosetech.com>
Date: Wed, 06 Aug 2014 07:31:42 -0700
From: Darren Pilgrim <list_freebsd@bluerosetech.com>
Reply-To: freebsd-questions@freebsd.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: freebsd@fongaboo.com, freebsd-questions@freebsd.org
Subject: Re: NSD & Unbound on same box?
References: <alpine.BSF.2.00.1408051858490.11081@helix.wtfayla.net>
In-Reply-To: <alpine.BSF.2.00.1408051858490.11081@helix.wtfayla.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Aug 2014 14:31:51 -0000

On 8/5/2014 4:09 PM, freebsd@fongaboo.com wrote:
> Is it not possible to run both a caching lookup server using Unbound (in
> FreeBSD 10) and an authoritative server using NSD (installed from ports)
> on the same box?
>
> BIND used to perform both functions as I remember, provided you configured
> it as such. Does NSD also do caching?
>
> We have a /27 so I could configure one or the other to listen on a
> different IP, but only if I really have to.

If the NSD is serving a public zone, yes, you have to.  Disabling 
recursion is part of BCP for public authoritative nameservers.

If it's a private zone, you can configure unbound with a stub zone 
referring to the private NSD instance.