Propose to migrate dnsmasq backed dns forwarder to powerdns-recursor backed
Basically we get significant improvements and more flexibility and overcoming issues like T557
Server | Authoritative | Recursive | Recursion ACL | Slave mode | Caching | DNSSEC | TSIG | IPv6 | Wildcard | Free Software | Interface | split horizon |
PowerDNS | Yes | Yes | Yes | Yes[Note 2] | Yes | Yes (since 3.0) [Note 3] | Yes (since 3.0) | Yes[Note 2] | Yes | Yes | Web[Note 4], command line | Partial[Note 5] |
Dnsmasq | Partial[Note 11] | No | No | No | Yes | Yes (since 2.69) [Note 12] | No | Yes | Yes | Yes | command line | Partial[Note 13] |
Table is from here