https://www.gptbest.top/tags/vps/Recent content in VPS on 轻量技术与生活笔记Hugo -- gohugo.iozh-cnSun, 12 Oct 2025 17:39:10 +0800https://www.gptbest.top/post/debainpei-zhi-dotjie-xi/Sun, 12 Oct 2025 17:39:10 +0800https://www.gptbest.top/post/debainpei-zhi-dotjie-xi/<img src="https://www.gptbest.top/image/136116792_p0_master1200.jpg" alt="Featured image of post debain配置dot解析" /><h4 id="安装与启动">安装与启动 </h4><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">sudo apt update </span></span><span class="line"><span class="cl">sudo apt install -y systemd-resolved </span></span><span class="line"><span class="cl">sudo systemctl <span class="nb">enable</span> --now systemd-resolved </span></span></code></pre></td></tr></table> </div> </div><h4 id="让系统使用本地-dns-stub">让系统使用本地 DNS stub </h4><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf </span></span></code></pre></td></tr></table> </div> </div><ul> <li>stub-resolv.conf 的 nameserver 是 127.0.0.53，所有查询才会进入 systemd-resolved。</li> </ul> <h4 id="配置-dns-over-tlsdot">配置 DNS over TLS（DoT） </h4><h5 id="建立-drop-in-配置">建立 drop-in 配置 </h5><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">sudo mkdir -p /etc/systemd/resolved.conf.d </span></span><span class="line"><span class="cl">vim /etc/systemd/resolved.conf.d/dot.conf </span></span></code></pre></td></tr></table> </div> </div><p>文件内容示例（Cloudflare + Quad9 + Google 作主备）：</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">[Resolve] </span></span><span class="line"><span class="cl">DNS=1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net </span></span><span class="line"><span class="cl">FallbackDNS=8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google </span></span><span class="line"><span class="cl">DNSOverTLS=yes </span></span><span class="line"><span class="cl">DNSSEC=allow-downgrade </span></span></code></pre></td></tr></table> </div> </div><p>重启服务</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">sudo systemctl restart systemd-resolved </span></span></code></pre></td></tr></table> </div> </div>