perf(dns): add CoreDNS caching across zones

This commit is contained in:
2026-03-03 22:24:06 -05:00
parent 09c25f514e
commit ea3a9e4232
+16
View File
@@ -1,5 +1,6 @@
## resolve emerdns
coin.:53, emc.:53, lib.:53, bazar.:53, enum.:53 {
cache 300
forward . 10.5.0.9:5335
}
@@ -10,6 +11,7 @@ meshname.:53, popura.:53 {
block
}
meshname
cache 300
}
## Example .popura domain hosting with a simple /etc/hosts like config
@@ -29,6 +31,7 @@ meshname.:53, popura.:53 {
## Example .meship support
meship {
meship
cache 300
}
## Resolve Alfis domains
@@ -38,6 +41,7 @@ anon.:53, btn.:53, conf.:53, index.:53, merch.:53, mirror.:53, mob.:53, screen.:
block
}
# forward . [302:db60::53]:53 [300:6223::53]:53 [302:7991::53]:53
cache 300
forward . 10.5.0.3:53
}
@@ -48,6 +52,7 @@ onion.:53 {
block
}
# tor container listens on 9053 for DNS queries
cache 300
forward . 10.5.0.7:9053
}
@@ -57,6 +62,7 @@ i2p.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.2:53
}
@@ -66,6 +72,7 @@ eth.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.11:53
}
@@ -75,6 +82,7 @@ bit.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.12:53
}
@@ -84,6 +92,7 @@ alt.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.5:53
}
@@ -93,6 +102,7 @@ loki.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.14:53
}
@@ -102,6 +112,7 @@ zil.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.5:53
}
@@ -111,6 +122,7 @@ web3.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.5:53
}
@@ -120,6 +132,7 @@ exit.:53, onion4.:53, onion6.:53 {
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.7:9053
}
@@ -129,6 +142,7 @@ bbs.:53, chan.:53, cyb.:53, dyn.:53, epic.:53, geek.:53, gopher.:53, indy.:53, l
allow net 100.0.0.0/8 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ::1/128 fc00::/7 200::/7
block
}
cache 300
forward . 10.5.0.5:53
}
@@ -142,6 +156,8 @@ bbs.:53, chan.:53, cyb.:53, dyn.:53, epic.:53, geek.:53, gopher.:53, indy.:53, l
fallthrough
}
cache 300
## Resolve all other DNS queries via AdGuard with DNS-over-TLS encryption
# forward . tls://94.140.14.14:853 tls://94.140.15.15:853 {
# tls_servername dns.adguard.com