-
基于 OpenResty lua-resty-dns-server dns server
-
支持 A, AAAA, CNAME, NS, TXT, MX, SRV, SOA DNS记录类型列表
-
支持 区域解析 ngx_stream_ipdb_module, IP地址库: qqwry.ipdb
# docker pull selboo/ngdns-server
# docker run -itd -p 3053:53/udp selboo/ngdns-server
# dig @127.0.0.1 -p 3053 a.aikaiyuan.com | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 c.aikaiyuan.com | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 6.aikaiyuan.com AAAA | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 t.aikaiyuan.com TXT | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 aikaiyuan.com NS | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 aikaiyuan.com MX | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 srv.aikaiyuan.com SRV | grep -A 3 "ANSWER SECTION"
# dig @127.0.0.1 -p 3053 aikaiyuan.com SOA | grep -A 3 "ANSWER SECTION"
# git clone https://github.com/vislee/ngx_stream_ipdb_module.git
# cd ngx_stream_ipdb_module
# git checkout add-lua-api
# sed -i 's/ngx_stream_lua_get_request/ngx_stream_lua_get_req/g' ngx_stream_ipdb_lua.c
# cd ..
# wget https://openresty.org/download/openresty-1.19.3.1.tar.gz
# tar zxvf openresty-1.19.3.1.tar.gz
# cd openresty-1.19.3.1
# ./configure --prefix=/usr/local/ngdns-server/ --with-stream --add-module=../ngx_stream_ipdb_module/ --with-cc-opt="-I $PWD/build/ngx_stream_lua*/src"
# gmake -j
# gmake install
https://github.com/vislee/lua-resty-dns-server
/usr/local/ngdns-server/bin/opm get vislee/lua-resty-dns-server
wget https://github.com/vislee/lua-resty-dns-server/raw/add-feature-subnet/lib/resty/dns/server.lua \
/usr/local/ngdns-server/site/lualib/resty/dns/server.lua
https://github.com/thibaultcha/lua-resty-mlcache
/usr/local/ngdns-server/bin/opm get thibaultcha/lua-resty-mlcache
https://github.com/p0pr0ck5/lua-resty-logger-socket
/usr/local/ngdns-server/bin/opm get p0pr0ck5/lua-resty-logger-socket
wget https://raw.githubusercontent.com/selboo/ngdns-server/master/53.lua \
-O /usr/local/ngdns-server/nginx/conf/53.lua
wget https://cdn.jsdelivr.net/npm/qqwry.ipdb/qqwry.ipdb \
-O /usr/local/ngdns-server/nginx/conf/qqwry.ipdb
# yum install redis -y
#user nobody;
worker_processes auto;
error_log logs/error.log ;
pid logs/nginx.pid;
events {
worker_connections 1024;
}
stream {
lua_package_path '/usr/local/ngdns-server/lualib/?.lua;/usr/local/ngdns-server/nginx/conf/?.lua;;';
lua_package_cpath '/usr/local/ngdns-server/lualib/?.so;;';
lua_shared_dict QUERYCACHE 32m;
lua_shared_dict my_locks 1m;
ipdb /usr/local/ngdns-server/nginx/conf/qqwry.ipdb;
ipdb_language "CN";
init_by_lua_block {
local resty_lock = require "resty.lock"
local mlcache = require "resty.mlcache"
local cache, err = mlcache.new("my_cache", "QUERYCACHE", {
lru_size = 100000,
ttl = 10,
neg_ttl = 10,
resty_lock_opts = resty_lock,
shm_locks = my_locks
})
_G.cache = cache
local tld = {
"aikaiyuan.com",
"selboo.com",
"abc.com"
}
local tlds = table.concat(tld, "|")
local zone = {
"(",
tlds,
")$"
}
_G.zone = table.concat(zone)
local DNSTYPES = {}
DNSTYPES[1] = "A"
DNSTYPES[2] = "NS"
DNSTYPES[5] = "CNAME"
DNSTYPES[6] = "SOA"
DNSTYPES[12] = "PTR"
DNSTYPES[15] = "MX"
DNSTYPES[16] = "TXT"
DNSTYPES[28] = "AAAA"
DNSTYPES[33] = "SRV"
DNSTYPES[99] = "SPF"
DNSTYPES[255] = "ANY"
_G.DNSTYPES = DNSTYPES
local views = {
电信 = "DX",
联通 = "LT",
移动 = "YD",
中华电信 = "DX",
鹏博士 = "PBS",
教育网 = "JY",
远传电信 = "DX",
广电网 = "DX",
亚太电信 = "DX",
长城 = "PBS"
}
_G.VIEWS = views
}
server {
listen 53 udp ;
content_by_lua_block {
local ngdns = require "53"
local new = ngdns:new({
redis_host = "127.0.0.1",
redis_port = 6379,
redis_timeout = 5,
})
new:run_udp()
}
log_by_lua_block {
local logger = require "resty.logger.socket"
if not logger.initted() then
local ok, err = logger.init{
host = '127.0.0.1',
port = 514,
sock_type = "udp",
flush_limit = 1,
drop_limit = 99999,
}
if not ok then
ngx.log(ngx.ERR, "failed to initialize the logger: ", err)
return
end
end
logger.log(ngx.ctx.log)
}
}
server {
listen 1053 ;
content_by_lua_block {
local ngdns = require "53"
local new = ngdns:new({
redis_host = "127.0.0.1",
redis_port = 6379,
redis_timeout = 5,
tcp = 1,
})
new:run_tcp()
}
log_by_lua_block {
local logger = require "resty.logger.socket"
if not logger.initted() then
local ok, err = logger.init{
host = '127.0.0.1',
port = 514,
sock_type = "udp",
flush_limit = 1,
drop_limit = 99999,
}
if not ok then
ngx.log(ngx.ERR, "failed to initialize the logger: ", err)
return
end
end
logger.log(ngx.ctx.log)
}
}
}
# systemctl restart redis
# /usr/local/ngdns-server/nginx/sbin/nginx
2019-06-25 15:59:51 127.0.0.1 8.8.8.8 lb.aikaiyuan.com aikaiyuan.com lb * A aikaiyuan.com/lb/*/A
2019-06-25 15:59:51 127.0.0.1 127.0.0.1 lb.aikaiyuan.com aikaiyuan.com lb * A aikaiyuan.com/lb/*/A
time client_ip subnet_ip domain tld sub view qtype redis_key
| View | Code | Region |
|---|---|---|
| 电信 | DX | 中国 |
| 远传电信 | DX | 中国 |
| 广电网 | DX | 中国 |
| 亚太电信 | DX | 中国 |
| 中华电信 | DX | 中国 |
| 联通 | LT | 中国 |
| 移动 | YD | 中国 |
| 教育网 | JY | 中国 |
| 鹏博士 | PBS | 中国 |
| 长城 | PBS | 中国 |
| 海外 | HW | 海外 |
| 局域网 | JYW |
数据来源: http://www.cz88.net/ip/
## tld/sub/view/type value/ttl set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/lb/*/A 220.181.1.1/3600 220.181.2.2/3600 # 默认区域
OK
127.0.0.1:6379> sadd aikaiyuan.com/lb/LT/A 123.125.3.3/3600 # 联通区域
OK
# dig @127.0.0.1 lb.aikaiyuan.com
## tld/sub/view/type value/ttl set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/www/*/CNAME aikaiyuan.appchizi.com./3600 # 默认区域
OK
127.0.0.1:6379> sadd aikaiyuan.com/www/DX/CNAME dx.appchizi.com./60 # 电信区域
OK
# dig @127.0.0.1 www.aikaiyuan.com CNAME
## tld/sub/view/type value/ttl set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/ipv6/*/AAAA 240c::6666/60 240c::8888/60
OK
# dig @127.0.0.1 ipv6.aikaiyuan.com AAAA
## tld/sub/view/type value/ttl set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/ns/*/NS ns10.aikaiyuan.com./86400
OK
# dig @127.0.0.1 ns.aikaiyuan.com NS
## tld/sub/view/type value/ttl set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/txt/*/TXT txt.aikaiyuan.com/1200
OK
# dig @127.0.0.1 txt.aikaiyuan.com txt
## tld/sub/view/type value/ttl/preference set
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/@/*/MX smtp1.qq.com./720/10 smtp2.qq.com./720/10
OK
# dig @127.0.0.1 aikaiyuan.com MX
## tld/sub/view/type priority/weight/port/value/ttl
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/srv/*/SRV 1/100/800/www.aikaiyuan.com/120
OK
# dig @127.0.0.1 srv.aikaiyuan.com SRV
## tld/type mname/rname/serial/refresh/retry/expire/minimum/ttl
# redis-cli
127.0.0.1:6379> sadd aikaiyuan.com/SOA ns1.aikaiyuan.com/domain.aikaiyuan.com/1558348800/1800/900/604800/86400/7200
OK
# dig @127.0.0.1 aikaiyuan.com SOA
- mname 名称服务器的 ，该名称服务器是这个区域的数据起源或主要源。
- rname 一个，它规定负责这个区域的个人的邮箱。由于不支持 @ 这里使用 . 替代 domain.aikaiyuan.com. <=> domain@aikaiyuan.com
- serial 该区域的原始副本的无符号 32 位版本号。区域传递保存这个值。这个值叠起(wrap)，并且应当使用系列空间算法比较这个值。
- refresh 区域应当被刷新前的 32 位时间间隔
- retry 在重试失败的刷新前，应当等待的 32 位时间间隔
- expire 32 位时间值，它规定在区域不再是权威的之前可以等待的时间间隔的上限
- minimum 无符号 32 位最小值 TTL 字段，应当用来自这个区域的任何 RR 输出它。
- ttl TTL
- edns-client-subnet
- ngdns-api