dns 归档 - 夜莺博客

标签：dns

DNSSEC ZSK and KSK Key Rollover with BIND 9

DNSSEC ZSK and KSK Key Rollover with BIND 9

Roll DNSSEC keys safely in BIND 9: dnssec-policy, ZSK pre-publish versus KSK double-KSK strategies, rndc dnssec status checks and DS submission steps.

admin admin 2026-10-06
0 0 0
DNS Zone Transfer Hardening: AXFR and IXFR

DNS Zone Transfer Hardening: AXFR and IXFR

Zone transfers replicate DNS and leak your host list. Learn how AXFR and IXFR work and how to lock them down with TSIG and allow-transfer on BIND and

admin admin 2026-10-05
0 0 0
mDNS Gateway Across VLANs: Bonjour Reflection Setup

mDNS Gateway Across VLANs: Bonjour Reflection Setup

Apple Bonjour mDNS does not cross VLANs by default. Learn how an mDNS gateway reflects AirPlay and AirPrint between subnets, and how to bound the mult

admin admin 2026-10-05
0 0 0
CoreDNS in Kubernetes: Corefile, Plugins and Stub Zones

CoreDNS in Kubernetes: Corefile, Plugins and Stub Zones

Understand and edit the CoreDNS Corefile in Kubernetes: plugin chain order, cache and forward tuning, stub zones and NodeLocal DNSCache.

admin admin 2026-10-04
0 0 0
Pi-hole vs AdGuard Home: Choosing a DNS Filter in 2026

Pi-hole vs AdGuard Home: Choosing a DNS Filter in 2026

Pi-hole v6 vs AdGuard Home compared: encrypted DNS, per-client rules, parental controls, DHCP and the redundancy mistake everyone makes.

admin admin 2026-10-04
0 0 0
Anycast DNS: Design, Routing and Failure Modes

Anycast DNS: Design, Routing and Failure Modes

Design anycast DNS with BGP: shared unicast addressing, health-based prefix injection and the failure modes that only show up in production.

admin admin 2026-10-01
0 0 0
AdGuard Home: Self-Hosted DNS Filtering and Ad Blocking

AdGuard Home: Self-Hosted DNS Filtering and Ad Blocking

Deploy AdGuard Home as a self-hosted DNS filter: install options, upstream configuration, filter lists, blocking modes and client policies.

admin admin 2026-09-30
0 0 0
DNS over HTTPS and DNS over TLS: Encrypted DNS Deployment

DNS over HTTPS and DNS over TLS: Encrypted DNS Deployment

Deploy encrypted DNS with DoH and DoT: protocol differences, resolver configuration, firewall port planning and trade-offs for enterprises.

admin admin 2026-09-30
0 0 0
DNS RPZ: Building a DNS Firewall with Response Policy Zones

DNS RPZ: Building a DNS Firewall with Response Policy Zones

Use DNS Response Policy Zones to block malware and phishing at the resolver: RPZ triggers, policy actions, BIND configuration and testing.

admin admin 2026-09-30
0 0 0
PowerDNS Authoritative Server with dnsdist

PowerDNS Authoritative Server with dnsdist

Deploy PowerDNS with a database backend and dnsdist in front: schema setup, zone management, DNSSEC, caching, rate limiting and query-log analysis.

admin admin 2026-09-26
0 0 0
1 2