Install Your Own DNS Server on FreeNAS/BSD

參考網站

• DrKK's Guide on DNS -- What It Is, and How to Install Your Own DNS Server on FreeNAS/BSD | FreeNAS Community

2. ## DrKK's Simple recursive caching DNS pool
3. ##
4. ## Conservative system resource usage for ZFS/FreeNAS environment.
5. ## ***NOT*** appropriate for a heavily loaded environment!
6. ##
7. ## This uses settings that are pretty minimal---i.e., I expect
8. ## this keeps the memory footprint low, while generally offering
9. ## full performance for the typical home/small business user.  These
10. ## settings would be ridiculous for a large enterprise.
11. #
12. ## DrKK can be found on the #FreeNAS irc channel, or in the forums
13. ## at http://forums.freenas.org/
14. #
15. ## The DNS forwarders listed below work well for me.  DO YOUR RESEARCH.
16. #
17. server:
18.   interface: 0.0.0.0
19. # The following line assumes your LAN is on the usual 192.168.x.x network.  Change
20. # this setting if necessary.
21.   access-control: 192.168.0.0/16 allow
22.   verbosity: 1
23.   statistics-interval: 3600
24.   statistics-cumulative: yes
25. #  outgoing-range: 800
26.   outgoing-range: 256
27.   num-threads: 1
28.   msg-cache-size: 1m
29.   msg-cache-slabs: 1
30.   num-queries-per-thread: 128
31.   rrset-cache-size: 2m
32.   rrset-cache-slabs: 1
33.   infra-cache-numhosts: 16
34.   infra-cache-slabs: 1
35.   do-ip4: yes
36.   do-ip6: no
37.   do-udp: yes
38.   do-tcp: no
39.   logfile: "unbound.log"
40.   use-syslog: no
41.   log-time-ascii: yes
42.   private-address: 10.0.0.0/8
43.   private-address: 172.16.0.0/12
44.   private-address: 192.168.0.0/16
45.   private-address: 169.254.0.0/16
46.   do-not-query-localhost: yes
47.   log-queries: no
48.   identity: "unbound DNS running on FreeNAS"
49.   target-fetch-policy: "0 0 0 0 0"
50.   prefetch: yes
51.   cache-max-ttl: 604800
52.   module-config: "iterator"
55. forward-zone:
56. ## This is a good set of resolvers for the eastern US.  Recommend
57. ## that you investigate the best servers for your location.  I recommend
58. ## Steve Gibson's DNSBench: https://www.grc.com/dns/benchmark.htm
59.   name: "."
60.   forward-addr: 199.45.32.40
61.   forward-addr: 63.218.44.186
62.   forward-addr: 216.52.126.1
63.   forward-addr: 8.8.8.8
66. # OPTIONAL REMOTE CONTROL SETTINGS (comment out if desired)
67. # You must run unbound-control-setup before unbound-control can be used.
68. remote-control:
69.   control-enable: yes
70.   control-interface: 0.0.0.0