\u6bcf\u500b\u63d0\u4f9b\u5546\u70baLA\u4f3a\u670d\u5668\u63d0\u4f9b\u7368\u7279\u512a\u52e2\uff1a<\/p>\n

\n
• Google DNS\uff1a\u51fa\u8272\u7684\u5168\u7403\u89e3\u6790\u901f\u5ea6\u548c\u7a69\u5b9a\u6548\u80fd<\/li>\n
• Cloudflare\uff1a\u512a\u8d8a\u7684DDoS\u4fdd\u8b77\u548c\u4e9e\u592a\u5730\u5340\u512a\u5316<\/li>\n
• OpenDNS\uff1a\u9032\u968e\u904e\u6ffe\u529f\u80fd\u548c\u5b89\u5168\u7279\u6027<\/li>\n<\/ul>\n

  \u63d0\u4f9b\u5546\u7684\u5176\u4ed6\u512a\u52e2\uff1a<\/p>\n

  \n
  • \u5ee3\u6cdb\u7684\u4efb\u64ad\u7db2\u8def<\/li>\n
  • \u5167\u5efa\u5b89\u5168\u529f\u80fd<\/li>\n
  • \u9032\u968e\u5206\u6790\u80fd\u529b<\/li>\n
  • \u5168\u7403\u8ca0\u8f09\u5e73\u8861<\/li>\n
  • IPv6\u652f\u63f4<\/li>\n<\/ul>\n

    \u7279\u5b9a\u7cfb\u7d71\u7684DNS\u914d\u7f6e\u6b65\u9a5f<\/strong><\/h2>\n

    \u8b93\u6211\u5011\u63a2\u8a0eLA\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u5e38\u7528\u4f5c\u696d\u7cfb\u7d71\u7684\u6280\u8853\u5be6\u73fe\u3002\u9019\u4e9b\u914d\u7f6e\u91dd\u5c0d\u9ad8\u6d41\u91cf\u5834\u666f\u548c\u589e\u5f37\u5b89\u5168\u6027\u9032\u884c\u4e86\u512a\u5316\u3002<\/p>\n

    Linux DNS\u914d\u7f6e<\/h3>\n

    \u5c0d\u65bcLinux\u4f3a\u670d\u5668\uff0c\u4f7f\u7528\u9069\u7576\u7684\u5b89\u5168\u63aa\u65bd\u4fee\u6539resolv.conf\u6a94\u6848\uff1a<\/p>\n

    \r\n# \u5099\u4efd\u73fe\u6709\u914d\u7f6e\r\nsudo cp \/etc\/resolv.conf \/etc\/resolv.conf.backup\r\n\r\n# \u7de8\u8f2fDNS\u8a2d\u5b9a\r\nsudo nano \/etc\/resolv.conf\r\n\r\n# \u6dfb\u52a0\u4ee5\u4e0b\u884c\r\nnameserver 1.1.1.1\r\nnameserver 8.8.8.8\r\noptions rotate timeout:1 attempts:5\r\noptions edns0\r\noptions trust-ad\r\n\r\n# \u4f7f\u914d\u7f6e\u6c38\u4e45\u751f\u6548\r\nsudo chattr +i \/etc\/resolv.conf\r\n<\/code><\/pre>\n
    Windows\u4f3a\u670d\u5668\u914d\u7f6e<\/h3>\n
    \u5c0d\u65bcWindows\u74b0\u5883\uff0c\u4f7f\u7528PowerShell\u9032\u884c\u9ad8\u6548\u7684DNS\u914d\u7f6e\uff1a<\/p>\n
    \r\n# PowerShell DNS\u914d\u7f6e\u547d\u4ee4\r\nGet-NetAdapter | Where-Object {$_.Status -eq \"Up\"} | ForEach-Object {\r\n    Set-DnsClientServerAddress -InterfaceIndex $_.InterfaceIndex -ServerAddresses (\"1.1.1.1\",\"8.8.8.8\")\r\n}\r\n\r\n# \u9a57\u8b49\u914d\u7f6e\r\nGet-DnsClientServerAddress | Where-Object {$_.AddressFamily -eq 2}\r\n\r\n# \u914d\u7f6eDNS\u5ba2\u6236\u7aef\u8a2d\u5b9a\r\nSet-DnsClientGlobalSetting -SuffixSearchList @(\"internal.domain\",\"domain.com\")\r\nSet-DnsClientGlobalSetting -UseSuffixSearchList $true\r\n<\/code><\/pre>\n
    \u6548\u80fd\u512a\u5316\u6280\u8853<\/strong><\/h2>\n
    \u5be6\u65bd\u9019\u4e9b\u9032\u968e\u914d\u7f6e\u4ee5\u512a\u5316LA\u4f3a\u670d\u5668\u7684DNS\u6548\u80fd\uff0c\u91cd\u9ede\u95dc\u6ce8\u5feb\u53d6\u6548\u7387\u548c\u67e5\u8a62\u512a\u5316\uff1a<\/p>\n
    \r\n# Linux\uff1a\u555f\u7528systemd-resolved\u7684DNS\u5feb\u53d6\r\nsudo systemctl enable systemd-resolved\r\nsudo systemctl start systemd-resolved\r\n\r\n# \u914d\u7f6ensswitch.conf\r\nhosts: files dns myhostname\r\n\r\n# \u512a\u5316\u5feb\u53d6\u8a2d\u5b9a\r\nsudo nano \/etc\/systemd\/resolved.conf\r\n[Resolve]\r\nCache=yes\r\nDNSStubListener=yes\r\nCacheFromLocalhost=yes\r\nFallbackDNS=9.9.9.9 149.112.112.112\r\nDNSSEC=allow-downgrade\r\nDNSOverTLS=opportunistic\r\n<\/code><\/pre>\n
    \u76e3\u63a7\u548c\u6548\u80fd\u6e2c\u8a66<\/strong><\/h2>\n
    \u5be6\u65bd\u9019\u4e9b\u8a3a\u65b7\u547d\u4ee4\u4f86\u76e3\u63a7DNS\u6548\u80fd\u4e26\u78ba\u4fdd\u6700\u4f73\u904b\u884c\uff1a<\/p>\n
    \r\n# \u6e2c\u8a66DNS\u89e3\u6790\u901f\u5ea6\r\ndig @1.1.1.1 example.com\r\ndig @8.8.8.8 example.com\r\n\r\n# \u76e3\u63a7DNS\u5ef6\u9072\r\nfor i in {1..10}; do\r\n    time dig @1.1.1.1 example.com > \/dev\/null\r\ndone\r\n\r\n# \u6aa2\u67e5DNS\u50b3\u64ad\r\ndig +trace example.com\r\n\r\n# \u9032\u968e\u76e3\u63a7\r\ndig +stats +nssearch example.com\r\ndig +short ns example.com\r\n<\/code><\/pre>\n
    DNS\u554f\u984c\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
    \u5728\u7ba1\u7406LA\u4f3a\u670d\u5668\u6642\uff0c\u9019\u4e9b\u9032\u968e\u6545\u969c\u6392\u9664\u6280\u8853\u6709\u52a9\u65bc\u7dad\u6301\u6700\u4f73DNS\u6548\u80fd\u4e26\u5feb\u901f\u89e3\u6c7a\u554f\u984c\uff1a<\/p>\n
    \r\n# \u5728Linux\u4e0a\u5237\u65b0DNS\u5feb\u53d6\r\nsudo systemd-resolve --flush-caches\r\n\r\n# \u6aa2\u67e5\u4e0d\u540c\u63d0\u4f9b\u5546\u7684DNS\u97ff\u61c9\u6642\u9593\r\nfor server in 1.1.1.1 8.8.8.8 208.67.222.222; do\r\n    echo \"\u6e2c\u8a66 $server:\"\r\n    dig @$server google.com | grep \"Query time\"\r\ndone\r\n\r\n# \u9a57\u8b49DNS\u5b89\u5168\u6027\r\ndig +dnssec example.com\r\n\r\n# \u6aa2\u67e5\u53cd\u5411DNS\r\ndig -x IP_ADDRESS\r\n\r\n# \u6e2c\u8a66EDNS\u76f8\u5bb9\u6027\r\ndig +nocmd example.com any +multiline +noall +answer\r\n<\/code><\/pre>\n
    \u9032\u968eDNS\u5b89\u5168\u914d\u7f6e<\/strong><\/h2>\n
    \u5be6\u65bd\u9019\u4e9b\u5168\u9762\u7684\u5b89\u5168\u63aa\u65bd\u4ee5\u4fdd\u8b77DNS\u57fa\u790e\u8a2d\u65bd\uff1a<\/p>\n
    \n
    \u5e36\u81ea\u52d5\u91d1\u9470\u7ba1\u7406\u7684DNSSEC\u9a57\u8b49<\/li>\n
    \u5e36\u56de\u9000\u9078\u9805\u7684DNS-over-HTTPS (DoH)<\/li>\n
    \u5e36\u6191\u8b49\u56fa\u5b9a\u7684DNS-over-TLS (DoT)<\/li>\n
    \u56de\u61c9\u7387\u9650\u5236 (RRL)<\/li>\n
    \u5b58\u53d6\u63a7\u5236\u6e05\u55ae (ACLs)<\/li>\n<\/ul>\n
    \r\n# \u5728systemd-resolved\u4e2d\u555f\u7528DoT\r\nsudo nano \/etc\/systemd\/resolved.conf\r\n\r\n[Resolve]\r\nDNS=1.1.1.1\r\nDNSOverTLS=yes\r\nDNSSEC=yes\r\nCache=yes\r\nDNSStubListener=yes\r\n<\/code><\/pre>\n
    \u6700\u4f73\u5be6\u8e10\u548c\u672a\u4f86\u8003\u616e<\/strong><\/h2>\n
    \u70ba\u7372\u5f97\u6700\u4f73\u7684\u6d1b\u6749\u78ef\u4f3a\u670d\u5668DNS\u6548\u80fd\uff0c\u5be6\u65bd\u9019\u4e9b\u57fa\u672c\u5be6\u8e10\uff1a<\/p>\n
    \n
    \u4f7f\u7528\u4efb\u64ad\u8def\u7531\u5be6\u73fe\u5730\u7406DNS\u8ca0\u8f09\u5e73\u8861<\/li>\n
    \u5b9a\u671f\u76e3\u63a7DNS\u56de\u61c9\u6642\u9593\u548c\u932f\u8aa4\u7387<\/li>\n
    \u7dad\u8b77\u5177\u6709\u81ea\u52d5\u6545\u969c\u8f49\u79fb\u7684\u5099\u4efdDNS\u63d0\u4f9b\u5546<\/li>\n
    \u5b89\u6392\u81ea\u52d5DNS\u5065\u5eb7\u6aa2\u67e5\u548c\u8b66\u5831<\/li>\n
    \u5be6\u65bdDNS\u5b89\u5168\u6700\u4f73\u5be6\u8e10<\/li>\n
    \u5b9a\u671f\u7a3d\u6838DNS\u914d\u7f6e<\/li>\n
    \u91dd\u5c0d\u4e9e\u592a\u6d41\u91cf\u9032\u884c\u6548\u80fd\u512a\u5316<\/li>\n
    \u76e3\u63a7\u548c\u512a\u5316TTL\u503c<\/li>\n<\/ul>\n
    \u7d50\u8ad6<\/strong><\/h2>\n
    \u6b63\u78ba\u914d\u7f6e\u7684DNS\u8a2d\u5b9a\u5c0d\u6d1b\u6749\u78ef\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u81f3\u95dc\u91cd\u8981\u3002\u900f\u904e\u5be6\u65bd\u672c\u6307\u5357\u4e2d\u6982\u8ff0\u7684\u5168\u9762\u914d\u7f6e\u548c\u6700\u4f73\u5be6\u8e10\uff0c\u60a8\u53ef\u4ee5\u78ba\u4fddLA\u57fa\u790e\u8a2d\u65bd\u7684\u6700\u4f73\u6548\u80fd\u3001\u5b89\u5168\u6027\u548c\u53ef\u9760\u6027\u3002\u5b9a\u671f\u76e3\u63a7\u3001\u7dad\u8b77\u548c\u66f4\u65b0\u5c07\u6709\u52a9\u65bc\u4fdd\u6301\u6700\u4f73\u6548\u80fd\u4e26\u9069\u61c9\u4e0d\u65b7\u767c\u5c55\u7684\u7db2\u8def\u689d\u4ef6\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
    \u70ba\u6d1b\u6749\u78ef\u4f3a\u670d\u5668\u8a2d\u5b9aDNS\u914d\u7f6e\u9700\u8981\u7cbe\u78ba\u7684\u6280\u8853\u77e5\u8b58\u548c\u5c0d\u7db2\u8def\u57fa\u790e\u8a2d\u65bd\u7684\u7406\u89e3\u3002\u672c\u7d9c\u5408\u6307\u5357\u63a2\u8a0e\u4e86\u4f4d\u65bcLA\u8cc7\u6599\u4e2d\u5fc3\u7684\u4f3a\u670d\u5668 […]<\/p>\n
    Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":21675,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4815],"tags":[6004,6006,6005,4371,3570],"class_list":["post-21685","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-tc","tag-los-angeles-server-dns-tc","tag-server-dns-setup-tc","tag-la-hosting-dns-tc","tag-dns-optimization-tc","tag-dns-configuration-tc"],"acf":[],"yoast_head":"\n