怎样用 Bind9 搭建 PublicDNS

AliPublicDNS 返回的
`pi@raspberrypi:/etc $ dig @223.5.5.5 v2ex.com

; <<>> DiG 9.9.5-9+deb8u4-Raspbian <<>> @223.5.5.5 v2ex.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31451
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;v2ex.com. IN A

;; ANSWER SECTION:
v2ex.com. 15 IN A 183.60.90.83
v2ex.com. 15 IN A 59.173.16.210
v2ex.com. 15 IN A 183.60.90.82
v2ex.com. 15 IN A 180.96.71.148

;; Query time: 2185 msec
;; SERVER: 223.5.5.5#53(223.5.5.5)
;; WHEN: Sat Jan 09 06:51:11 UTC 2016
;; MSG SIZE rcvd: 90`

GeekTest

2016-01-09 16:55:28 +08:00

但是自建的连域名 NS 记录也返回了
pi@raspberrypi:/etc/bind $ dig @127.0.0.1 v2ex.com

; <<>> DiG 9.9.5-9+deb8u4-Raspbian <<>> @127.0.0.1 v2ex.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48962
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;v2ex.com. IN A

;; ANSWER SECTION:
v2ex.com. 600 IN A 180.96.71.148
v2ex.com. 600 IN A 183.60.90.83
v2ex.com. 600 IN A 183.60.90.82
v2ex.com. 600 IN A 59.173.16.210

;; AUTHORITY SECTION:
v2ex.com. 172796 IN NS ns-1546.awsdns-01.co.uk.
v2ex.com. 172796 IN NS ns-1330.awsdns-38.org.
v2ex.com. 172796 IN NS ns-940.awsdns-53.net.
v2ex.com. 172796 IN NS ns-153.awsdns-19.com.

;; ADDITIONAL SECTION:
ns-153.awsdns-19.com. 172796 IN A 205.251.192.153

;; Query time: 3652 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Jan 09 06:54:56 UTC 2016
;; MSG SIZE rcvd: 254

GeekTest

2016-01-09 19:23:09 +08:00

配置文件
named.conf:

options {
listen-on port 5553 { 127.0.0.1; };
recursion yes;
};

zsj950618

2016-01-10 02:20:14 +08:00 via Android

两个结果不是一样的吗→_→

GeekTest

2016-01-10 08:10:14 +08:00 via Android

@zsj950618 不一样啊←_←

ryd994

2016-01-10 12:14:43 +08:00 via Android

你确定真的要 public 么？ public DNS

ryd994

2016-01-10 12:14:58 +08:00 via Android

public DNS 是超大的坑

lenovo

2016-01-11 04:58:27 +08:00

可以试试 Unbound+DNSCrypt 的 LocalDNS 分流解析方案

lenovo

2016-01-11 04:58:56 +08:00

https://github.com/CNMan/unbound.conf

ztrt

2016-01-11 10:55:01 +08:00

@lenovo 按步骤来并修改好了配置没生效解析不了： D:\Program Files\unbound>unbound-checkconf unbound.conf
unbound-checkconf: no errors in unbound.conf

D:\Program Files\unbound>unbound-control -c unbound.conf reload
[1452480673] unbound-control[5780:0] error: connect: Connection refused. for ::1

D:\Program Files\unbound>ipconfig /flushdns

Windows IP 配置

已成功刷新 DNS 解析缓存。
这是什么情况。

leonard916

2016-01-11 12:11:43 +08:00

问题在于 BIND 的性能表示不能做大并发的递归你本地使用当然没问题

lenovo

2016-01-11 17:15:02 +08:00

r#10 @ztrt XP?现在已经很少没有安装 IPv6 协议的系统了啊
unbound.conf 中把这两行注释或删除
interface: ::1
control-interface: ::1

popu111

2016-01-11 21:37:50 +08:00 via Android

总是只在 op 上 fq 用好多人是不是忘了 dnsmasq 也是个不错的自制 DNS 方案？ rz

ztrt

2016-01-11 21:47:04 +08:00

@lenovo 可以了谢谢

GeekTest

2016-01-14 15:12:56 +08:00

@popu111 Dnsmasq 貌似只能转发吧