Eigener DNS-Server = volle Kontrolle über den Resolver.

BIND¶

DNS-Konfiguration — BIND und CoreDNS¶

$TTL 3600 @ IN SOA ns1.example.local. admin.example.local. ( 2024010101 3600 900 604800 86400) @ IN NS ns1.example.local. ns1 IN A 10.0.1.1 web IN A 10.0.1.10 db IN A 10.0.1.20

CoreDNS¶

.:53 { forward . 8.8.8.8 8.8.4.4 cache 30 log } example.local:53 { file /etc/coredns/db.example.local }

Wann was¶

• BIND — Enterprise, autoritativ, DNSSEC
• CoreDNS — Kubernetes, Microservices
• dnsmasq — kleine Netzwerke, DHCP + DNS

DNS-Server = Kontrolle¶

Interner Resolver, Service Discovery, Split-Horizon DNS.