Vlastní DNS server = plná kontrola nad resolverem.

BIND¶

/etc/bind/zones/db.example.local¶

$TTL 3600 @ IN SOA ns1.example.local. admin.example.local. ( 2024010101 3600 900 604800 86400) @ IN NS ns1.example.local. ns1 IN A 10.0.1.1 web IN A 10.0.1.10 db IN A 10.0.1.20

CoreDNS¶

.:53 { forward . 8.8.8.8 8.8.4.4 cache 30 log } example.local:53 { file /etc/coredns/db.example.local }

Kdy co¶

• BIND — enterprise, autoritativní, DNSSEC
• CoreDNS — Kubernetes, mikroslužby
• dnsmasq — malé sítě, DHCP + DNS

DNS server = kontrola¶

Interní resolver, service discovery, split-horizon DNS.