hybridadmin/dnsdist repository overview

---
version: "3"
services:
  dnsdist:
    image: hybridadmin/dnsdist:1.5.0
    container_name: dnsdist-server
    hostname: dnsdist-server #optional
    environment:
      - LISTEN_ADDR=0.0.0.0
      - SET_MAXUDPOUTSTANDING=65535 #optional
      - SET_MAXTCPCLIENTTHREADS=100 #optional
      - SET_MAXTCPCONNECTIONDURATION=10 #optional
      - SET_MAXTCPCONNECTIONSPERCLIENT=100 #optional
      - SET_MAXTCPQUERIESPERCONNECTION=100 #optional
      - SET_ECSOVERRIDE=true #optional
      - SET_ECSSOURCEPREFIXV4=32 #optional
      - SET_ECSSOURCEPREFIXV6=128 #optional
      - SET_SERVFAILWHENNOSERVER=true #optional
      - SET_VERBOSEHEALTHCHECKS=true #optional
    ports:
      - 53:53/tcp
      - 53:53/udp
    restart: always

docker run -d -p 53:53/udp -p 53:53/tcp --restart=always hybridadmin/dnsdist:latest

docker run -d \
-e LISTEN_ADDR=0.0.0.0 \
-e SET_MAXUDPOUTSTANDING=65535 #optional \
-e SET_MAXTCPCLIENTTHREADS=100 #optional \
-e SET_MAXTCPCONNECTIONDURATION=10 #optional \
-e SET_MAXTCPCONNECTIONSPERCLIENT=100 #optional \
-e SET_MAXTCPQUERIESPERCONNECTION=100 #optional \
-e SET_ECSOVERRIDE=true #optional \
-e SET_ECSSOURCEPREFIXV4=32 #optional \
-e SET_ECSSOURCEPREFIXV6=128 #optional \
-e SET_SERVFAILWHENNOSERVER=true #optional \
-e SET_VERBOSEHEALTHCHECKS=true #optional \
-p 53:53/udp -p 53:53/tcp --restart=always hybridadmin/dnsdist:latest

-- Variables
local enable_caching = "true"

setMaxUDPOutstanding(65535)
setMaxTCPClientThreads(100)
setMaxTCPConnectionDuration(10)
setMaxTCPConnectionsPerClient(100)
setMaxTCPQueriesPerConnection(100)
--setECSOverride(true)
setECSSourcePrefixV4(32)
setECSSourcePrefixV6(128)
setServFailWhenNoServer(true)
--setVerboseHealthChecks(true)

-- Local Addresses binding
setLocal("0.0.0.0:53", {doTCP = true, reusePort = true})
addLocal("0.0.0.0:53", {doTCP = true, reusePort = true})

-- Backend servers
newServer({address="1.1.1.1", name="cloudflare", qps=2000, order=1, weight=1, checkName="c.root-servers.net.", checkType="A", maxCheckFailures=1, retries=5})
newServer({address="9.9.9.9", name="quad9", qps=2000, order=2, weight=2, checkName="d.root-servers.net.", checkType="A", maxCheckFailures=1, retries=5})
setServerPolicy(firstAvailable)

-- Access Lists
AllowedSubnets={"127.0.0.1/32", "0.0.0.0/0"}
setACL(AllowedSubnets)

-- Caching
if (string.match(enable_caching, "true")) then
        pcache = newPacketCache(1000000, {maxTTL=86400, minTTL=0, temporaryFailureTTL=60, staleTTL=60, dontAge=false})
        getPool(""):setCache(pcache)
        setStaleCacheEntriesTTL(28800)
end

-- Dynamic Blocks
local dbr = dynBlockRulesGroup()
dbr:setQueryRate(200, 10, "Exceeded Max Query per Second rate", 60, 100)
dbr:setRCodeRate(DNSRCode.NXDOMAIN, 100, 10, "Exceeded NXD rate", 60)
dbr:setRCodeRate(DNSRCode.SERVFAIL, 100, 10, "Exceeded ServFail rate", 60)
dbr:setQTypeRate(DNSQType.ANY, 50, 10, "Exceeded ANY rate", 60)
dbr:setResponseByteRate(10000, 10, "Exceeded resp BW rate", 60)
dbr:excludeRange({"192.0.2.0/24", "2001:db8::/32"})

function maintenance()
        dbr:apply()
end