a1c0ec8678281e59f4b8e0d05be13b52887f3ff4
services/dns/Configuration.md
| ... | ... | @@ -127,7 +127,7 @@ server=/d.f.ip6.arpa/fd42:d42:d42:54::1 |
| 127 | 127 | in `dnsmasq.conf`. |
| 128 | 128 | |
| 129 | 129 | ## PowerDNS recursor |
| 130 | -Add this to /etc/powerdns/recursor.conf (at least in Debian and CentOS). |
|
| 130 | +Old-style config for /etc/powerdns/recursor.conf (Debian and CentOS): |
|
| 131 | 131 | |
| 132 | 132 | ```conf |
| 133 | 133 | dont-query=127.0.0.0/8, 192.168.0.0/16, ::1/128, fe80::/10 |
| ... | ... | @@ -140,6 +140,33 @@ forward-zones-recurse+=10.in-addr.arpa=172.20.0.53 |
| 140 | 140 | forward-zones-recurse+=d.f.ip6.arpa=172.20.0.53 |
| 141 | 141 | ``` |
| 142 | 142 | |
| 143 | +New-style (YAML) config: |
|
| 144 | + |
|
| 145 | +```yaml |
|
| 146 | +recursor: |
|
| 147 | + config_dir: /etc/powerdns # as per default config |
|
| 148 | + forward_zones_recurse: |
|
| 149 | + - zone: dn42 |
|
| 150 | + forwarders: |
|
| 151 | + # try primary delegation servers first, then anycast recursors, then other recursors |
|
| 152 | + # remove or reorder the servers as desired; just using the anycast recursors should work too |
|
| 153 | + - 'fd42:4242:2601:ac53::1' # b.delegation-servers.dn42 |
|
| 154 | + - 'fd00:913e:130::400' # d.delegation-servers.dn42 |
|
| 155 | + - 'fd42:4242:2189::1' # i.delegation-servers.dn42 |
|
| 156 | + - 'fd42:5d71:219:0:216:3eff:fe1e:22d6' # j.delegation-servers.dn42 |
|
| 157 | + - 'fdcf:8538:9ad5:1111::2' # k.delegation-servers.dn42 |
|
| 158 | + - 'fd86:bad:11b7:53::1' # l.delegation-servers.dn42 |
|
| 159 | + - 'fd42:d42:d42:53::1' # a0.recursive-servers.dn42 |
|
| 160 | + - 'fd42:d42:d42:54::1' # a3.recursive-servers.dn42 |
|
| 161 | + - 'fd00:913e:130::1000' # d.recursive-servers.dn42 |
|
| 162 | + - 'fd86:bad:11b7:53::2' # l.recursive-servers.dn42 |
|
| 163 | + - 'fdcf:8538:9ad5:1111::1' # k.recursive-servers.dn42 |
|
| 164 | + - 'fdbc:f9dc:67ad:2547::53' # t.recursive-servers.dn42 |
|
| 165 | + - 'fd42:4242:2189::53' # i.recursive-servers.dn42 |
|
| 166 | + - 'fd42:5d71:219:0:216:3eff:fee8:c215' # j.recursive-servers.dn42 |
|
| 167 | + - 'fd42:4242:2601:ac53::53' # b.recursive-servers.dn42 |
|
| 168 | +``` |
|
| 169 | + |
|
| 143 | 170 | ## MaraDNS |
| 144 | 171 | Put this in your mararc: |
| 145 | 172 |