银河麒麟安装BIND做DNS缓存服务器的配置文件named.conf

2025年3月7日

编辑named.conf文件,里面设置相应选项。

 

options {
directory “/var/cache/bind”;
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
dump-file “/var/cache/bind/cache_dump.db”;
statistics-file “/var/cache/bind/named_stats.txt”;
memstatistics-file “/var/cache/bind/named_mem_stats.txt”;
secroots-file “/var/cache/bind/named.secroots”;
recursing-file “/var/cache/bind/named.recursing”;
allow-query { any; };
max-cache-ttl 17200;
prefetch 2 9;
recursion yes;
forward first;
forwarders {180.76.76.76;119.29.29.29;223.5.5.5;};
//dnssec-enable no;
dnssec-validation no;
//anaged-keys-directory “/var/cache/bind/dynamic”;
pid-file “/run/named/named.pid”;
session-keyfile “/run/named/session.key”;
};

logging {
channel query_log {
file “/var/cache/bind/queries.log”;
severity info;
print-time yes;
};
category queries {query_log; };
};

我尝试搞了两天,注意防火墙必须打开53端口才可以,

这个服务器我做了SMB,同时做DNS缓存,关闭了防火墙后,局域网解析确实快了许多,特此记之。2025.3.7