Klinger: Category:DNS added

2025-03-20T16:31:47Z

← Older revision		Revision as of 16:31, 20 March 2025
Line 74:		Line 74:
	[[Category:Networking]]		[[Category:Networking]]
	[[Category:Server]]		[[Category:Server]]
			[[Category:DNS]]

Klinger: added link to bind

2024-09-29T17:29:14Z

added link to bind

← Older revision		Revision as of 17:29, 29 September 2024
Line 1:		Line 1:
	BIND (Berkeley Internet Name Domain) is one of the most widely used DNS servers.		[https://www.isc.org/bind/ BIND] (Berkeley Internet Name Domain) is one of the most widely used DNS servers.

	== Caching DNS resolver ==		== Caching DNS resolver ==

Klinger: Category:Networking Category:Server

2024-09-28T15:57:39Z

Category:Networking Category:Server

← Older revision		Revision as of 15:57, 28 September 2024
Line 71:		Line 71:
	}		}
	</syntaxhighlight>		</syntaxhighlight>

			[[Category:Networking]]
			[[Category:Server]]

Nathanruiz: Created page with "BIND (Berkeley Internet Name Domain) is one of the most widely used DNS servers. == Caching DNS resolver == If you are trying to setup bind as a simple DNS resolver, this can be configured using all the default options. You'll just need to enable the service: { ... }: { services.bind = { enable = true; }; } == Serving DNS for Your Domain == To run BIND as the primary DNS server for your domain, you can start with t..."

2024-09-28T14:15:26Z

Created page with "BIND (Berkeley Internet Name Domain) is one of the most widely used DNS servers. == Caching DNS resolver == If you are trying to setup bind as a simple DNS resolver, this can be configured using all the default options. You'll just need to enable the service:<syntaxhighlight lang="nix"> { ... }: { services.bind = { enable = true; }; } </syntaxhighlight> == Serving DNS for Your Domain == To run BIND as the primary DNS server for your domain, you can start with t..."

New page

BIND (Berkeley Internet Name Domain) is one of the most widely used DNS servers.

== Caching DNS resolver ==
If you are trying to setup bind as a simple DNS resolver, this can be configured using all the default options. You'll just need to enable the service:<syntaxhighlight lang="nix">
{ ... }:
{
services.bind = {
enable = true;
};
}
</syntaxhighlight>

== Serving DNS for Your Domain ==
To run BIND as the primary DNS server for your domain, you can start with this config:<syntaxhighlight lang="nix">
{ pkgs, ... }:
{
services.bind = {
enable = true;
zones = {
"example.com" = {
master = true;
file = pkgs.writeText "zone-example.com" ''
$ORIGIN example.com.
$TTL 1h
@ IN SOA ns1 hostmaster (
1 ; Serial
3h ; Refresh
1h ; Retry
1w ; Expire
1h) ; Negative Cache TTL
IN NS ns1
IN NS ns2

@ IN A 203.0.113.1
IN AAAA 2001:db8:113::1
IN MX 10 mail
IN TXT "v=spf1 mx"

www IN A 203.0.113.1
IN AAAA 2001:db8:113::1

ns1 IN A 203.0.113.4
IN AAAA 2001:db8:113::4

ns2 IN A 198.51.100.5
IN AAAA 2001:db8:5100::5
'';
};
};
};
}
</syntaxhighlight>You'll need to modify the zone file to match your use case. You can lookup other common setups in [https://bind9.readthedocs.io/en/stable/chapter3.html BIND's documentation].

== Split DNS resolver ==
Split DNS allows you to manage privately resolving DNS records for a network, while also resolving queries for other websites. This is common in VPN setups, and it used by providers such as [https://tailscale.com/learn/why-split-dns tailscale]. You may want to configure the networks that can use BIND as a cache (using cacheNetworks) and the networks that can query your private hosted zones (using allowQuery).<syntaxhighlight lang="nix">
{ pkgs, ... }:
{
services.bind = {
enable = true;
cacheNetworks = [ "127.0.0.0/24" "::1/128" "192.168.0.0/24" ];
zones = {
"example.com" = {
master = true;
allowQuery = [ "127.0.0.0/24" "::1/128" "192.168.0.0/24" ];
file = pkgs.writeText "zone-example.com" ''
...
'';
};
};
};
}
</syntaxhighlight>

Bind - Revision history

Klinger: Category:DNS added

Klinger: added link to bind

Klinger: Category:Networking Category:Server