-
Notifications
You must be signed in to change notification settings - Fork 50
/
Copy pathnginx-dns-routing.conf
60 lines (47 loc) · 1.19 KB
/
nginx-dns-routing.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
user nginx;
worker_processes auto;
load_module modules/ngx_stream_js_module.so;
error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
stream {
# logging
log_format dns '$remote_addr [$time_local] $protocol "$dns_qname" "$upstream_pool"';
access_log /var/log/nginx/dns-access.log dns;
# import NJS module
js_import /etc/nginx/njs.d/dns/dns.js;
# NJS function to get the dns_qname, requires a js_preread in the server to populate the variable from the DNS packet
js_set $dns_qname dns.get_qname;
# This maps the qname domain to the DNS server for routing
map $dns_qname $upstream_pool {
hostnames;
*.nginx dnsmasq;
*.k8s dnsmasq;
default google;
}
# Google upstream
upstream google {
zone dns 64k;
server 8.8.8.8:53;
}
# dnsmasq local upstream
upstream dnsmasq {
zone dns 64k;
server 192.168.64.1:53;
}
# DNS(TCP) Serverr
server {
listen 53;
js_preread dns.preread_dns_request;
proxy_pass $upstream_pool;
}
# DNS(UDP) Server
server {
listen 53 udp;
js_preread dns.preread_dns_request;
proxy_responses 1;
proxy_pass $upstream_pool;
}
}