服务器使用 pdnsd 部署 DNS forwarder 的方法

Assume that you use Ubuntu.

Download & Install pdnsd:

apt-get install pdnsd

1	apt-get install pdnsd

At the setup configuration step, choose manual. Then modify the config file: /etc/pdnsd.conf

At the global section, change server_ip, add server_port, increase or decrease the perm_cache, change min_ttl & max_ttl at your own need, just like:

global {
	perm_cache=4096;   //cache size,KB
	cache_dir="/var/cache/pdnsd";  //cache file position
	run_as="pdnsd";     //just leave default
	server_ip = 0.0.0.0;  // Use your interface name, or your IP address
				// or 0.0.0.0
	server_port = 1212;   //bind port, just do not use port 53
	status_ctl = on;
  	paranoid=on;
//	query_method=tcp_udp;	// pdnsd must be compiled with tcp
				// query support for this to work.
	min_ttl=1d;       // Retain cached entries at least 1 day.
	max_ttl=1w;	   // One week.
	neg_ttl=120s;
	timeout=5;        // Global timeout option (10 seconds).
}

global {

perm_cache=4096; //cache size,KB

cache_dir="/var/cache/pdnsd"; //cache file position

run_as="pdnsd"; //just leave default

server_ip = 0.0.0.0; // Use your interface name, or your IP address

// or 0.0.0.0

server_port = 1212; //bind port, just do not use port 53

status_ctl = on;

paranoid=on;

// query_method=tcp_udp; // pdnsd must be compiled with tcp

// query support for this to work.

min_ttl=1d; // Retain cached entries at least 1 day.

max_ttl=1w; // One week.

neg_ttl=120s;

timeout=5; // Global timeout option (10 seconds).

}

Then add the upstream DNS server, just like:

server {
	label = "mydns";
	ip = 	1.2.3.4
	,	1.2.3.5
	,	1.2.3.6
	;
	timeout = 3;
	uptest = none;
	purge_cache = off;
	edns_query = on;
	exclude = .localdomain;
}

server {

label = "mydns";

ip = 1.2.3.4

, 1.2.3.5

, 1.2.3.6

;

timeout = 3;

uptest = none;

purge_cache = off;

edns_query = on;

exclude = .localdomain;

}

Comment out the unnecessary sections, such as root-servers & resolvconf:

/*
server {
    label="resolvconf";
}
*/

/*
server {
	label = "root-servers";
	root_server=on;
...
...
	policy = included;
	preset = off;
}
*/

server {

label="resolvconf";

}

server {

label = "root-servers";

root_server=on;

...

policy = included;

preset = off;

}

Here’s an example for pdnsd.conf

To see more details of pdnsd, just look at pdnsd Documents

Modify the file /etc/default/pdnsd, change START_DAEMON=no to START_DAEMON=yes and save the file. Finally start pdnsd:

service pdnsd start

1	service pdnsd start

Add firewall rule if neccessary (Assume that you use UFW):

ufw allow 1212

1	ufw allow 1212

Check it on your PC:

dig @X.X.X.X -p 1212 www.youtube.com

; <<>> DiG 9.9.5-3-Ubuntu <<>> @X.X.X.X -p 2121 www.youtube.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64845
;; flags: qr rd ra; QUERY: 1, ANSWER: 12, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1024
;; QUESTION SECTION:
;www.youtube.com.               IN      A

;; ANSWER SECTION:
www.youtube.com.        86400   IN      CNAME   youtube-ui.l.google.com.
youtube-ui.l.google.com. 86400  IN      A       173.194.117.232
youtube-ui.l.google.com. 86400  IN      A       173.194.117.231
youtube-ui.l.google.com. 86400  IN      A       173.194.117.233
youtube-ui.l.google.com. 86400  IN      A       173.194.117.238
youtube-ui.l.google.com. 86400  IN      A       173.194.117.224
youtube-ui.l.google.com. 86400  IN      A       173.194.117.227
youtube-ui.l.google.com. 86400  IN      A       173.194.117.225
youtube-ui.l.google.com. 86400  IN      A       173.194.117.230
youtube-ui.l.google.com. 86400  IN      A       173.194.117.229
youtube-ui.l.google.com. 86400  IN      A       173.194.117.228
youtube-ui.l.google.com. 86400  IN      A       173.194.117.226

;; Query time: 80 msec
;; SERVER: X.X.X.X#1212(X.X.X.X)
;; WHEN: Sun Nov 16 10:13:39 UTC 2014
;; MSG SIZE  rcvd: 254

dig @X.X.X.X -p 1212 www.youtube.com

; <<>> DiG 9.9.5-3-Ubuntu <<>> @X.X.X.X -p 2121 www.youtube.com

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64845

;; flags: qr rd ra; QUERY: 1, ANSWER: 12, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 1024

;; QUESTION SECTION:

;www.youtube.com. IN A

;; ANSWER SECTION:

www.youtube.com. 86400 IN CNAME youtube-ui.l.google.com.

youtube-ui.l.google.com. 86400 IN A 173.194.117.232

youtube-ui.l.google.com. 86400 IN A 173.194.117.231

youtube-ui.l.google.com. 86400 IN A 173.194.117.233

youtube-ui.l.google.com. 86400 IN A 173.194.117.238

youtube-ui.l.google.com. 86400 IN A 173.194.117.224

youtube-ui.l.google.com. 86400 IN A 173.194.117.227

youtube-ui.l.google.com. 86400 IN A 173.194.117.225

youtube-ui.l.google.com. 86400 IN A 173.194.117.230

youtube-ui.l.google.com. 86400 IN A 173.194.117.229

youtube-ui.l.google.com. 86400 IN A 173.194.117.228

youtube-ui.l.google.com. 86400 IN A 173.194.117.226

;; Query time: 80 msec

;; SERVER: X.X.X.X#1212(X.X.X.X)

;; WHEN: Sun Nov 16 10:13:39 UTC 2014

;; MSG SIZE rcvd: 254

pve物理机启用IPv6

DNS，pdnsd

88 条评论

引用: WNDR4300+OP+Shadowsocks+ChinaDNS科学上网 – 予而不语
予而不语 2015-05-07 于 19:23 回复

为什么有时候dig youtube时只返回一条A记录.会是什么造成的?
1. cokebar 文章作者 2015-05-13 于 19:34 回复
  
  部分地区使用Google DNS查询确实只有一条
  1. guaitaitai 2015-05-21 于 09:55 回复
    
    同样的问题，不管查询什么都只返回一条A记录
    1. cokebar 文章作者 2015-05-21 于 09:56
      
      确实只有一条啊正常的
guaitaitai 2015-05-21 于 19:55 回复

了解。不过1212端口还是不能解决境外网站问题，还是受到了污染，跟dnsmasq一样只能解析大中华局域网内网站，速度还是挺快的。
1. cokebar 文章作者 2015-05-22 于 00:21 回复
  
  pdnsd装在国外服务上没有污染的
  1. guaitaitai 2015-05-22 于 08:18 回复
    
    可能是解析到的IP已经被封锁了
    1. cokebar 文章作者 2015-05-22 于 10:36
      
      单是解决DNS污染肯定不行啊代理还是要的
guaitai 2015-05-22 于 19:22 回复

已经完美解决了，用的dnsmasaq然后修改服务器里面的hosts。
1. guaitai 2015-05-22 于 19:23 回复
  
  感谢楼主的耐心解答
引用: Shadowsocks + ChnRoute 实现 OpenWRT 路由器自动翻墙 - ShadowSocks
引用: Shadowsocks + Redsocks 实现 OpenWRT 路由器自动翻墙 - ShadowSocks
引用: Shadowsocks + GfwList 实现 OpenWRT 路由器自动翻墙 - ShadowSocks
引用: 正向翻墙科技备忘录 – 飞羽博客三种shadowsocks在openwrt上的自动翻墙方案 | 一半君的备忘录
引用: 继续优化DNS-用PDNSD | Jeff's space
引用: 利用 pdnsd 部署 DNS forwarder 的方法 – 蜗牛小站