I am on AWC EC2, as my server is going to make a lot of query for third party domains, I am thinking the following options
- install nscd on all servers
- use the default ec2 name recursor
- install my own name recursor
- just use 22.214.171.124
I am hesitate to install centralized recursor so it is single point of failure, and subject to attack like: http://support.godaddy.com/help/article/1184/what-risks-are-associated-with-recursive-dns-queries
Is it common nowadays now one will use name server support recursive DNS query like the above article suggest?
In term of security and performance, I am thinking to install
nscd, are there any drawback?