I have been using BIND for decades now and somewhat stuck in my ways.
Want to make transition to unbound for a web server with multiple domains and don't even know where to start. The doc's on unbound haven't really helped.
So, if I can show what I have traditionally done, maybe someone can point out best practices going forward, I am certain this will be valuable to many people in the same old habits like mine.
I would like to thank anyone in advance that contributes to my learning via this thread.
This is my traditional BIND setup
1. add to named.conf
Although this isn't necessary it has helped me create groupings relevant to list of domains hosted
2. sample zone.conf
where xxx.xxx.xxx.xxx is IP address of upstream providers DNS server when upstream provider supplies secondary DNS services
and yyy.yyy.yyy.yyy is IP address of own secondary BIND server
3. Setup Zone Files eg. primary.domain1.com
Want to make transition to unbound for a web server with multiple domains and don't even know where to start. The doc's on unbound haven't really helped.
So, if I can show what I have traditionally done, maybe someone can point out best practices going forward, I am certain this will be valuable to many people in the same old habits like mine.
I would like to thank anyone in advance that contributes to my learning via this thread.
This is my traditional BIND setup
1. add to named.conf
Code:
include "/usr/local/etc/namedb/zone.xyz.conf";
include "/usr/local/etc/namedb/zone.abc.conf";
Although this isn't necessary it has helped me create groupings relevant to list of domains hosted
2. sample zone.conf
Code:
zone "domain1.comt" in {
type master;
file "master/primary.domian1.com";
allow-query { any; };
allow-transfer { xxx.xxx.xxx.xxx; yyy.yyy.yyy.yyy; };
};
zone "domain2.com" in {
type master;
file "master/primary.domain2.com";
allow-query { any; };
allow-transfer { xxx.xxx.xxx.xxx; yyy.yyy.yyy.yyy };
};
where xxx.xxx.xxx.xxx is IP address of upstream providers DNS server when upstream provider supplies secondary DNS services
and yyy.yyy.yyy.yyy is IP address of own secondary BIND server
3. Setup Zone Files eg. primary.domain1.com
Code:
$TTL 3600
domain1.com. IN SOA ns1.primarydnsdomain.com. hostmaster.domain1.com. (
2017022013 ; serial yyyymmddxx
3600 ; Refresh 1 hour
900 ; Retry 10 mins
604800 ; Expire 7 days
3600 ) ; Minimum TTL of 1 day
;Name Servers
IN NS ns1.primarydnsdomain.com.
IN NS ns2.primarydnsdomain.com.
;Main addresses
domain1.com. IN A 123.123.123.123
;Aliases
www IN CNAME domain1.com.
;TXT
domain1.com. IN TXT "v=spf1 include:_spf.mailserver.com ~all"
;Mail Exchanger
domain1.com. IN MX 10 primary.mailserver.com.
domain1.com. IN MX 20 backup.mailserver.com.