原coredns配置
.:53 {errorshealth {lameduck 5s}readykubernetes cluster.local in-addr.arpa ip6.arpa {pods insecurefallthrough in-addr.arpa ip6.arpa}prometheus :9153forward . "/etc/resolv.conf"cache 30loopreloadloadbalance
} # STUBDOMAINS - Rancher specific change
不解析ipv6配置
.:53 {errorshealth {lameduck 5s}readykubernetes cluster.local in-addr.arpaprometheus :9153# 仅拦截 AAAA 查询，不影响其他类型template IN AAAA . {rcode NXDOMAIN}# 使用英文引号，并指定可靠上游 DNSforward . /etc/resolv.conf {except no-ipv6.invalid # 避免循环policy sequential}cache 30loopreloadloadbalance
}
测试解析：
Name: maap201.gd.rcs.cn
Address: 1.1.1.1
** server can't find maap201.gd.rcs.cn: NXDOMAINreal 0m0.015s
user 0m0.007s
sys 0m0.005s
root@rcs-msg-send-prod-86665b4ccf-8h5gg:/hskj/app# for i in {1..50};do time nslookup maap201.gd.rcs.cn;doneroot@rcs-msg-send-test-b68fb6cc9-ccttg:/hskj/app# dig AAAA maap201.gd.rcs.cn @10.43.0.10; <<>> DiG 9.16.50-Debian <<>> AAAA maap201.gd.rcs.cn @10.43.0.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3708
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: b3b45e5abf8f7f42 (echoed)
;; QUESTION SECTION:
;maap201.gd.rcs.cn. IN AAAA;; Query time: 1 msec
;; SERVER: 10.43.0.10#53(10.43.0.10)
;; WHEN: Sat Jun 07 09:19:45 CST 2025
;; MSG SIZE rcvd: 62root@rcs-msg-send-test-b68fb6cc9-ccttg:/hskj/app# dig A maap201.gd.rcs.cn @10.43.0.10; <<>> DiG 9.16.50-Debian <<>> A maap201.gd.rcs.cn @10.43.0.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44578
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 536fbe9907cc6af4 (echoed)
;; QUESTION SECTION:
;maap201.gd.rcs.cn. IN A;; ANSWER SECTION:
maap201.gd.rcs.cn. 30 IN A 1.1.1.1;; Query time: 90 msec
;; SERVER: 10.43.0.10#53(10.43.0.10)
;; WHEN: Sat Jun 07 09:19:56 CST 2025
;; MSG SIZE rcvd: 99root@rcs-msg-send-test-b68fb6cc9-ccttg:/hskj/app#
