DNS plugins

One of the features that make OPNsense an extremely flexible system is the plugin additions. To extend DNS core features, we can install some plugins developed by the OPNsense community. Let’s take a look at some of these available DNS plugins, as follows:

• BIND (os-bind): The Internet Systems Consortium (ISC) Berkeley Internet Domain (BIND) is one of the most used DNS servers on the modern internet. It is a complete DNS server that can host several domain zones. On OPNsense, its implementation is focused on forwarder/resolver and blocklist capabilities. To install it, add the os-bind plugin.
• DNSCrypt Proxy (os-dnscrypt-proxy): DNSCrypt version 2 is a powerful DNS proxy that supports many features such as DoH and anonymous queries. The OPNsense implementation also allows DNS filtering (blocklists), and it can be a good alternative to dnsmasq or even Unbound in special cases. To install it, add the os-dnscrypt-proxy plugin.

After installation, both...