163 lines
2.8 KiB
Markdown
163 lines
2.8 KiB
Markdown
|
Go로 작성된 오픈소스 [[DNS]] Server
|
||
|
|
경량, 유연성, 단순함이 특징
|
||
|
|
k8s의 기본 DNS로 사용됨
|
||
|
|
|
||
|
|
# Install using docker
|
||
|
|
## Directory structure
|
||
|
|
|
||
|
|
```dirtree
|
||
|
|
- /mnt/md0/infra
|
||
|
|
- .env
|
||
|
|
- compose.yml
|
||
|
|
- /coredns
|
||
|
|
- /config
|
||
|
|
- Corefile
|
||
|
|
- home.server.db
|
||
|
|
- /data
|
||
|
|
```
|
||
|
|
|
||
|
|
## dotenv file
|
||
|
|
/.env
|
||
|
|
|
||
|
|
```
|
||
|
|
BASE_PATH=/mnt/md0/infra
|
||
|
|
```
|
||
|
|
|
||
|
|
## Docker compose
|
||
|
|
/compose.yml
|
||
|
|
|
||
|
|
```yml
|
||
|
|
|
||
|
|
name: infrastructure
|
||
|
|
services:
|
||
|
|
dns:
|
||
|
|
image: coredns/coredns:1.11.3
|
||
|
|
container_name: dns
|
||
|
|
restart: always
|
||
|
|
command: -conf /root/Corefile
|
||
|
|
ports:
|
||
|
|
- 53:53/udp
|
||
|
|
- 53:53/tcp
|
||
|
|
- 9153:9153/tcp
|
||
|
|
volumes:
|
||
|
|
- ${BASE_PATH}/coredns/data:/data:rw
|
||
|
|
- ${BASE_PATH}/coredns/config:/root:ro
|
||
|
|
networks:
|
||
|
|
- infra
|
||
|
|
|
||
|
|
networks:
|
||
|
|
infra:
|
||
|
|
driver: bridge
|
||
|
|
```
|
||
|
|
|
||
|
|
## 추가로 필요한 사항 - 리눅스
|
||
|
|
리눅스의 경우 53번 포트가 systemd-resolve 프로세스에 미리 점유되어 있다.
|
||
|
|
따라서 해당 프로세스가 53번 포트를 점유하지 않도록 바꿔주어야 DNS Server를 실행할 수 있다.
|
||
|
|
|
||
|
|
### 프로세스 확인
|
||
|
|
|
||
|
|
```shell
|
||
|
|
sudo lsof -i :53
|
||
|
|
```
|
||
|
|
|
||
|
|
```
|
||
|
|
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
|
||
|
|
systemd-r 671 systemd-resolve 14u IPv4 8659 0t0 UDP _localdnsstub:domain
|
||
|
|
systemd-r 671 systemd-resolve 15u IPv4 8660 0t0 TCP _localdnsstub:domain (LISTEN)
|
||
|
|
systemd-r 671 systemd-resolve 16u IPv4 8661 0t0 UDP _localdnsproxy:domain
|
||
|
|
systemd-r 671 systemd-resolve 17u IPv4 8662 0t0 TCP _localdnsproxy:domain (LISTEN)
|
||
|
|
```
|
||
|
|
|
||
|
|
### Edit systemd-resolved config
|
||
|
|
|
||
|
|
```shell
|
||
|
|
sudo vim /etc/systemd/resolved.conf
|
||
|
|
```
|
||
|
|
|
||
|
|
before
|
||
|
|
|
||
|
|
```
|
||
|
|
#DNS=
|
||
|
|
#FallbackDNS=
|
||
|
|
#Domains=
|
||
|
|
#DNSSEC=no
|
||
|
|
#DNSOverTLS=no
|
||
|
|
#MulticastDNS=no
|
||
|
|
#LLMNR=no
|
||
|
|
#Cache=no-negative
|
||
|
|
#CacheFromLocalhost=no
|
||
|
|
#DNSStubListener=yes
|
||
|
|
#DNSStubListenerExtra=
|
||
|
|
#ReadEtcHosts=yes
|
||
|
|
#ResolveUnicastSingleLabel=no
|
||
|
|
#StaleRetentionSec=0
|
||
|
|
```
|
||
|
|
|
||
|
|
after
|
||
|
|
|
||
|
|
```
|
||
|
|
DNS=8.8.8.8
|
||
|
|
#FallbackDNS=
|
||
|
|
#Domains=
|
||
|
|
#DNSSEC=no
|
||
|
|
#DNSOverTLS=no
|
||
|
|
#MulticastDNS=no
|
||
|
|
#LLMNR=no
|
||
|
|
#Cache=no-negative
|
||
|
|
#CacheFromLocalhost=no
|
||
|
|
DNSStubListener=no
|
||
|
|
#DNSStubListenerExtra=
|
||
|
|
#ReadEtcHosts=yes
|
||
|
|
#ResolveUnicastSingleLabel=no
|
||
|
|
#StaleRetentionSec=0
|
||
|
|
```
|
||
|
|
|
||
|
|
### Create symlink
|
||
|
|
|
||
|
|
```shell
|
||
|
|
sudo ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf
|
||
|
|
```
|
||
|
|
|
||
|
|
### Reboot
|
||
|
|
|
||
|
|
```shell
|
||
|
|
sudo reboot
|
||
|
|
```
|
||
|
|
|
||
|
|
# Corefile
|
||
|
|
CoreDNS 의 설정 파일
|
||
|
|
|
||
|
|
```
|
||
|
|
home.server {
|
||
|
|
file /root/home.server.db
|
||
|
|
log
|
||
|
|
}
|
||
|
|
|
||
|
|
. {
|
||
|
|
forward . tls://8.8.8.8 tls://1.1.1.1 {
|
||
|
|
except home.server
|
||
|
|
}
|
||
|
|
log
|
||
|
|
cache
|
||
|
|
errors
|
||
|
|
}
|
||
|
|
```
|
||
|
|
|
||
|
|
# Zone file
|
||
|
|
[[DNS#DNS Zone file]]
|
||
|
|
|
||
|
|
```
|
||
|
|
$ORIGIN home.server.
|
||
|
|
$TTL 3600
|
||
|
|
@ IN SOA ns1.home.server. admin.home.server. (
|
||
|
|
2024082401 ; serial
|
||
|
|
7200 ; refresh
|
||
|
|
3600 ; retry
|
||
|
|
1209600 ; expire
|
||
|
|
3600 ; minimum
|
||
|
|
)
|
||
|
|
@ IN NS ns1.home.server.
|
||
|
|
@ IN A 192.168.200.10
|
||
|
|
|
||
|
|
* IN CNAME @
|
||
|
|
```
|