Your own DNS server = full control over the resolver.

BIND¶

DNS Configuration — BIND and CoreDNS¶

$TTL 3600 @ IN SOA ns1.example.local. admin.example.local. ( 2024010101 3600 900 604800 86400) @ IN NS ns1.example.local. ns1 IN A 10.0.1.1 web IN A 10.0.1.10 db IN A 10.0.1.20

CoreDNS¶

.:53 { forward . 8.8.8.8 8.8.4.4 cache 30 log } example.local:53 { file /etc/coredns/db.example.local }

When to Use What¶

• BIND — enterprise, authoritative, DNSSEC
• CoreDNS — Kubernetes, microservices
• dnsmasq — small networks, DHCP + DNS

DNS server = control¶

Internal resolver, service discovery, split-horizon DNS.