Can someone explain where the best place to put a DNS cache is?
My dns goes:
AdGuard Home -> Unbound -> DNSCrypt-Proxy (all within OPNsense across localhost).
All three of these services have caching options.
I would have thought the best place would have been DNSCrypt, or is it worth having caches at each stage?
Or is it best at just Unbound since it can refresh the cache based on the ttl?
Any reason to use DNSCryptProxy if you are using unbound as well? Seems like it might be redundant. I would drop DNSCryptProxy, and use Unbound as your DNS cache.