smartdns/en/docs/config/server-config.md

hide

hide
toc

Server Configuration

Currently, smartdns provides three server modes: UDP, TCP, and DOT.

UDP Server

1. Configure with the bind parameter. For example:

   bind 0.0.0.0:53@eth0
   bind [::]:53@eth0
   bind :53@eth0
   

   Options:

   • @eth0 indicates that it only provides services on the corresponding NIC.
   • [::]:53 indicates that it listens to both IPV6 and IPV4 addresses.
   • :53 represents listening to IPV4 addresses.

TCP Server

1. Configure with the bind-tcp parameter. For example:

   bind-tcp 0.0.0.0:53@eth0
   bind-tcp [::]:53@eth0
   bind-tcp :53@eth0
   

2. Optional, the tcp-idle-time parameter controls the TCP idle disconnect time.

   tcp-idle-time 120
   

DOT Server

1. Configure with the bind-tcp parameter. For example:

   bind-tcp 0.0.0.0:53@eth0
   bind-tcp [::]:53@eth0
   bind-tcp :53@eth0
   

2. Set certificate and key files

   bind-cert-file smartdns-cert.pem
   bind-cert-key-file smartdns-key.pem
   bind-cert-key-pass pass
   

   Options:

   • bind-cert-file: Specifies the certificate file path.
   • bind-cert-key-file: Specifies the certificate key file path.
   • bind-cert-key-pass: Specifies the password for the certificate key file. (Optional)

   Note:

   If these three parameters are not specified, smartdns will automatically generate a self-signed cert smartdns-cert.pem and smartdns-key.pem key file in the /etc/smartdns directory, with CN as smartdns.

3. Optional, the tcp-idle-time parameter controls the TCP idle disconnect time.

   tcp-idle-time 120
   

Second DNS Server

In addition to supporting basic service, the bind-* parameter also supports more additional features, which can be used as a special second DNS server for specific needs. The corresponding functions that can be enabled are:

1. Configuration example:

   bind :53 -no-rule-addr -no-speed-check -no-cache
   

2. Parameter introduction:

   Parameter	Function
   -no-rule-addr	Skip address rules
   -no-rule-nameserver	Skip Nameserver rules
   -no-rule-ipset	Skip ipset and nftset rules
   -no-rule-soa	Skip SOA(#) rules
   -no-dualstack-selection	Disable dual-stack speed test
   -no-speed-check	Disable speed test
   -no-cache	Stop caching
   -force-aaaa-soa	Disable IPV6 queries