Technitium adalah sebuah system atau aplikasi DNS dengan GUI yang mudah digunakan dan mempunyai berbagai fitur keamanan.
DNS merupakan sebuah sistem yang menghubungkan Uniform Resource Locator atau URL dengan Internet Protocol Address atau IP Address. Kepanjangan dari DNS adalah domain name system.
Dalam sejarah domain tercatat, awalnya Anda perlu mengetikkan IP Address untuk mengakses sebuah website. Cara ini cukup merepotkan. Sebab, ini artinya, Anda perlu punya daftar lengkap IP Address website yang dikunjungi dan memasukkannya secara manual.
DNS adalah sistem yang meringkas pekerjaan ini untuk Anda. Kini, Anda tinggal mengingat nama domain dan memasukkannya dalam address bar. DNS kemudian akan menerjemahkan domain tersebut ke dalam IP Address yang komputer pahami.
Misalkan, Anda ingin mengakses Google. Alih-alih menulis 172.217.0.142 ke dalam address bar, Anda tinggal memasukkan alamat Google.com.
Shell
x
12
12
1
root@masadmin:~# mkdir -p /data/docker/technitium2
root@masadmin:~#3
root@masadmin:~# cd /data/docker/technitium4
root@masadmin:/data/docker/technitium#5
root@masadmin:/data/docker/technitium# mkdir config logs ssl6
root@masadmin:/data/docker/technitium#7
root@masadmin:/data/docker/technitium# ls -l8
total 129
drwxr-xr-x 2 root root 4096 Jul 8 04:51 config10
drwxr-xr-x 2 root root 4096 Jul 8 04:51 logs11
drwxr-xr-x 2 root root 4096 Jul 8 04:51 ssl12
root@masadmin:/data/docker/technitium#Shell
1
54
54
1
root@masadmin:/data/docker/technitium# nano docker-compose.yml2
root@masadmin:/data/docker/technitium#3
root@masadmin:/data/docker/technitium# cat docker-compose.yml4
version: "3"5
services:6
dns-server:7
container_name: dns-server8
hostname: dns-server9
image: technitium/dns-server:latest10
# For DHCP deployments, use "host" network mode and remove all the port mappings, including the ports array by commenting them11
# network_mode: "host"12
ports:13
- "5380:5380/tcp" #DNS web console (HTTP)14
# - "53443:53443/tcp" #DNS web console (HTTPS)15
- "53:53/udp" #DNS service16
- "53:53/tcp" #DNS service17
# - "853:853/udp" #DNS-over-QUIC service18
# - "853:853/tcp" #DNS-over-TLS service19
# - "443:443/udp" #DNS-over-HTTPS service (HTTP/3)20
# - "443:443/tcp" #DNS-over-HTTPS service (HTTP/1.1, HTTP/2)21
# - "80:80/tcp" #DNS-over-HTTP service (use with reverse proxy or certbot certificate renewal)22
# - "8053:8053/tcp" #DNS-over-HTTP service (use with reverse proxy)23
# - "67:67/udp" #DHCP service24
environment:25
- DNS_SERVER_DOMAIN=dns-server #The primary domain name used by this DNS Server to identify itself.26
# - DNS_SERVER_ADMIN_PASSWORD=password #DNS web console admin user password.27
# - DNS_SERVER_ADMIN_PASSWORD_FILE=password.txt #The path to a file that contains a plain text password for the DNS web console admin user.28
# - DNS_SERVER_PREFER_IPV6=false #DNS Server will use IPv6 for querying whenever possible with this option enabled.29
# - DNS_SERVER_WEB_SERVICE_HTTP_PORT=5380 #The TCP port number for the DNS web console over HTTP protocol.30
# - DNS_SERVER_WEB_SERVICE_HTTPS_PORT=53443 #The TCP port number for the DNS web console over HTTPS protocol.31
# - DNS_SERVER_WEB_SERVICE_ENABLE_HTTPS=false #Enables HTTPS for the DNS web console.32
# - DNS_SERVER_WEB_SERVICE_USE_SELF_SIGNED_CERT=false #Enables self signed TLS certificate for the DNS web console.33
# - DNS_SERVER_OPTIONAL_PROTOCOL_DNS_OVER_HTTP=false #Enables DNS server optional protocol DNS-over-HTTP on TCP port 8053 to be used with a TLS terminating reverse proxy like nginx.34
# - DNS_SERVER_RECURSION=AllowOnlyForPrivateNetworks #Recursion options: Allow, Deny, AllowOnlyForPrivateNetworks, UseSpecifiedNetworks.35
# - DNS_SERVER_RECURSION_DENIED_NETWORKS=1.1.1.0/24 #Comma separated list of IP addresses or network addresses to deny recursion. Valid only for `UseSpecifiedNetworks` recursion option.36
# - DNS_SERVER_RECURSION_ALLOWED_NETWORKS=127.0.0.1, 192.168.1.0/24 #Comma separated list of IP addresses or network addresses to allow recursion. Valid only for `UseSpecifiedNetworks` recursion option.37
# - DNS_SERVER_ENABLE_BLOCKING=false #Sets the DNS server to block domain names using Blocked Zone and Block List Zone.38
# - DNS_SERVER_ALLOW_TXT_BLOCKING_REPORT=false #Specifies if the DNS Server should respond with TXT records containing a blocked domain report for TXT type requests.39
# - DNS_SERVER_BLOCK_LIST_URLS= #A comma separated list of block list URLs.40
# - DNS_SERVER_FORWARDERS=1.1.1.1, 8.8.8.8 #Comma separated list of forwarder addresses.41
# - DNS_SERVER_FORWARDER_PROTOCOL=Tcp #Forwarder protocol options: Udp, Tcp, Tls, Https, HttpsJson.42
# - DNS_SERVER_LOG_USING_LOCAL_TIME=true #Enable this option to use local time instead of UTC for logging.43
volumes:44
- ./config:/etc/dns45
- ./ssl:/etc/ssl46
- ./logs:/app/config/log47
restart: unless-stopped48
sysctls:49
- net.ipv4.ip_local_port_range=1024 6500050
51
volumes:52
config:53
root@masadmin:/data/docker/technitium#54
Shell
1
74
74
1
root@masadmin:~# sudo apt install docker-compose2
Reading package lists... Done3
Building dependency tree... Done4
Reading state information... Done5
The following packages were automatically installed and are no longer required:6
libflashrom1 libftdi1-27
Use 'sudo apt autoremove' to remove them.8
The following additional packages will be installed:9
python3-docker python3-dockerpty python3-docopt python3-dotenv python3-texttable python3-websocket10
Recommended packages:11
docker.io12
The following NEW packages will be installed:13
docker-compose python3-docker python3-dockerpty python3-docopt python3-dotenv python3-texttable python3-websocket14
0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded.15
Need to get 290 kB of archives.16
After this operation, 1,545 kB of additional disk space will be used.17
Do you want to continue? [Y/n] Y18
Get:1 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-websocket all 1.2.3-1 [34.7 kB]19
Get:2 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-docker all 5.0.3-1 [89.3 kB]20
Get:3 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-dockerpty all 0.4.1-2 [11.1 kB]21
Get:4 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-docopt all 0.6.2-4 [26.9 kB]22
Get:5 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-dotenv all 0.19.2-1 [20.5 kB]23
Get:6 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 python3-texttable all 1.6.4-1 [11.4 kB]24
Get:7 http://id.archive.ubuntu.com/ubuntu jammy/universe amd64 docker-compose all 1.29.2-1 [95.8 kB]25
Fetched 290 kB in 1s (324 kB/s)26
Selecting previously unselected package python3-websocket.27
(Reading database ... 109781 files and directories currently installed.)28
Preparing to unpack .../0-python3-websocket_1.2.3-1_all.deb ...29
Unpacking python3-websocket (1.2.3-1) ...30
Selecting previously unselected package python3-docker.31
Preparing to unpack .../1-python3-docker_5.0.3-1_all.deb ...32
Unpacking python3-docker (5.0.3-1) ...33
Selecting previously unselected package python3-dockerpty.34
Preparing to unpack .../2-python3-dockerpty_0.4.1-2_all.deb ...35
Unpacking python3-dockerpty (0.4.1-2) ...36
Selecting previously unselected package python3-docopt.37
Preparing to unpack .../3-python3-docopt_0.6.2-4_all.deb ...38
Unpacking python3-docopt (0.6.2-4) ...39
Selecting previously unselected package python3-dotenv.40
Preparing to unpack .../4-python3-dotenv_0.19.2-1_all.deb ...41
Unpacking python3-dotenv (0.19.2-1) ...42
Selecting previously unselected package python3-texttable.43
Preparing to unpack .../5-python3-texttable_1.6.4-1_all.deb ...44
Unpacking python3-texttable (1.6.4-1) ...45
Selecting previously unselected package docker-compose.46
Preparing to unpack .../6-docker-compose_1.29.2-1_all.deb ...47
Unpacking docker-compose (1.29.2-1) ...48
Setting up python3-dotenv (0.19.2-1) ...49
Setting up python3-texttable (1.6.4-1) ...50
Setting up python3-docopt (0.6.2-4) ...51
Setting up python3-websocket (1.2.3-1) ...52
Setting up python3-dockerpty (0.4.1-2) ...53
Setting up python3-docker (5.0.3-1) ...54
Setting up docker-compose (1.29.2-1) ...55
Processing triggers for man-db (2.10.2-1) ...56
Scanning processes...57
Scanning candidates...58
Scanning linux images...59
60
Restarting services...61
Service restarts being deferred:62
/etc/needrestart/restart.d/dbus.service63
systemctl restart networkd-dispatcher.service64
systemctl restart systemd-logind.service65
systemctl restart unattended-upgrades.service66
systemctl restart user@1000.service67
68
No containers need to be restarted.69
70
No user sessions are running outdated binaries.71
72
No VM guests are running outdated hypervisor (qemu) binaries on this host.73
root@masadmin:~#74
Shell
1
19
19
1
root@masadmin:/data/docker/technitium# docker-compose up -d2
Creating network "technitium_default" with the default driver3
Creating volume "technitium_config" with default driver4
Pulling dns-server (technitium/dns-server:latest)...5
latest: Pulling from technitium/dns-server6
759700526b78: Pull complete7
cafd06d60458: Pull complete8
d92bd1997582: Pull complete9
683b358f9ab0: Pull complete10
a85de7405299: Pull complete11
c9bb81fc486a: Pull complete12
d609e597299e: Pull complete13
92110e1714fa: Pull complete14
b102f19d104c: Pull complete15
Digest: sha256:535786e3f2c98c8159d7747f0db66cbb182aad41e94ef431bc91ebb384a4c32a16
Status: Downloaded newer image for technitium/dns-server:latest17
Creating dns-server ...18
Starting dns-server ... done19
Shell
1
6
1
root@masadmin:/data/docker/technitium# sudo systemctl stop systemd-resolved2
root@masadmin:/data/docker/technitium# sudo systemctl disable systemd-resolved3
Removed /etc/systemd/system/multi-user.target.wants/systemd-resolved.service.4
Removed /etc/systemd/system/dbus-org.freedesktop.resolve1.service.5
root@masadmin:/data/docker/technitium#6
Shell
1
8
1
root@masadmin:/data/docker/technitium# docker ps2
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES3
689a660d1001 technitium/dns-server:latest "/usr/bin/dotnet /op…" 27 minutes ago Up 26 minutes 80/tcp, 67/udp, 443/tcp, 443/udp, 0.0.0.0:53->53/tcp, :::53->53/tcp, 853/tcp, 8053/tcp, 0.0.0.0:5380->5380/tcp, 0.0.0.0:53->53/udp, :::5380->5380/tcp, :::53->53/udp, 853/udp, 53443/tcp dns-server4
root@masadmin:/data/docker/technitium# docker image ls5
REPOSITORY TAG IMAGE ID CREATED SIZE6
technitium/dns-server latest 6aa0f9acc054 5 days ago 258MB7
root@masadmin:/data/docker/technitium#8
