DNS Server di Debian 10: Panduan Lengkap Caching DNS, Forwarding, dan Authoritative DNS dengan BIND9

DNS (Domain Name System) adalah “buku telepon internet” — menerjemahkan nama domain seperti ngopidulur.my.id ke alamat IP yang bisa dipahami komputer.

Artikel ini memandu kamu membangun DNS server lengkap di Debian 10 menggunakan BIND9 (Berkeley Internet Name Domain).

Konsep DNS

Bagaimana DNS Bekerja?

1
Browser → Resolver → Root DNS → TLD DNS → Authoritative DNS → IP Address
2
  │                                                              │
3
  └──────────────────── Response: 192.168.x.x ←─────────────────┘

Jenis DNS Server

Jenis	Fungsi	Contoh
Caching	Menyimpan hasil query sementara	Mempercepat akses
Forwarding	Meneruskan query ke DNS upstream	Google DNS (8.8.8.8)
Authoritative	Menyimpan data zone untuk domain	ns1.ngopidulur.my.id
Recursive	Mencari jawaban dari root ke authoritative	ISP DNS

Instalasi BIND9

1
apt update
2
apt install bind9 bind9utils bind9-doc -y

Struktur Konfigurasi BIND

1
/etc/bind/
2
├── named.conf           # Konfigurasi utama
3
├── named.conf.options   # Opsi global
4
├── named.conf.local     # Zone definitions
5
├── named.conf.default-zones
6
├── db.root              # Root hints
7
├── db.local             # Localhost zone
8
└── zones/               # File zone (custom)

DNS Caching Server

Konfigurasi

Edit /etc/bind/named.conf.options:

1
options {
2
    directory "/var/cache/bind";
3

4
    // Allow queries dari network internal
5
    allow-query { localhost; 192.168.10.0/24; };
6

7
    // Enable recursion (caching)
8
    recursion yes;
9

10
    // Forwarders (DNS upstream)
11
    forwarders {
12
        8.8.8.8;       // Google DNS
13
        1.1.1.1;       // Cloudflare DNS
14
    };
15

16
    // DNSSEC validation
17
    dnssec-validation auto;
18

19
    // Listen on all interfaces
20
    listen-on { any; };
21
    listen-on-v6 { any; };
22
};

Test Caching

1
systemctl restart bind9
2

3
# Test query (pertama kali — lambat)
4
dig @localhost google.com
5

6
# Query kedua — cached (cepat!)
7
dig @localhost google.com | grep "Query time"
8
# Query time: 0 msec  ← cached!

DNS Forwarding Server

Meneruskan query ke server upstream tanpa caching:

1
options {
2
    forward only;        // Jangan resolve sendiri
3
    forwarders {
4
        8.8.8.8;
5
        8.8.4.4;
6
    };
7
};

Authoritative DNS Server

Untuk domain sendiri, misalnya ngopidulur.local.

1. Definisikan Zone

Edit /etc/bind/named.conf.local:

1
zone "ngopidulur.local" {
2
    type master;
3
    file "/etc/bind/zones/db.ngopidulur.local";
4
};
5

6
zone "10.168.192.in-addr.arpa" {
7
    type master;
8
    file "/etc/bind/zones/db.192.168.10";
9
};

2. Buat Forward Zone File

/etc/bind/zones/db.ngopidulur.local:

1
$TTL    604800
2
@       IN      SOA     ns1.ngopidulur.local. admin.ngopidulur.local. (
3
                  2024062401   ; Serial (YYYYMMDDXX)
4
                  3600         ; Refresh
5
                  1800         ; Retry
6
                  604800       ; Expire
7
                  86400 )      ; Minimum TTL
8

9
; Name servers
10
@       IN      NS      ns1.ngopidulur.local.
11
@       IN      NS      ns2.ngopidulur.local.
12

13
; A records
14
ns1     IN      A       192.168.10.1
15
ns2     IN      A       192.168.10.2
16
www     IN      A       192.168.10.10
17
mail    IN      A       192.168.10.20
18
ftp     IN      A       192.168.10.30
19

20
; CNAME records
21
blog    IN      CNAME   www
22

23
; MX record (mail)
24
@       IN      MX      10 mail.ngopidulur.local.

3. Buat Reverse Zone File

/etc/bind/zones/db.192.168.10:

1
$TTL    604800
2
@       IN      SOA     ns1.ngopidulur.local. admin.ngopidulur.local. (
3
                  2024062401
4
                  3600
5
                  1800
6
                  604800
7
                  86400 )
8

9
@       IN      NS      ns1.ngopidulur.local.
10

11
1       IN      PTR     ns1.ngopidulur.local.
12
10      IN      PTR     www.ngopidulur.local.
13
20      IN      PTR     mail.ngopidulur.local.

4. Set Permission & Test

1
chown -R bind:bind /etc/bind/zones/
2
chmod 644 /etc/bind/zones/*
3

4
# Check config
5
named-checkconf
6

7
# Check zone files
8
named-checkzone ngopidulur.local /etc/bind/zones/db.ngopidulur.local
9
named-checkzone 10.168.192.in-addr.arpa /etc/bind/zones/db.192.168.10
10

11
# Restart
12
systemctl restart bind9

5. Test dari Client

1
# Setting DNS client
2
echo "nameserver 192.168.10.1" >> /etc/resolv.conf
3

4
# Test
5
nslookup www.ngopidulur.local
6
# Server:  192.168.10.1
7
# Address: 192.168.10.10
8

9
# Reverse lookup
10
nslookup 192.168.10.10
11
# 10.10.168.192.in-addr.arpa  name = www.ngopidulur.local
12

13
# Test MX record
14
dig @192.168.10.1 ngopidulur.local MX

Troubleshooting DNS

Log BIND

1
tail -f /var/log/syslog | grep named
2
journalctl -u bind9 -f

Masalah Umum

Masalah	Penyebab	Solusi
`SERVFAIL`	Zone file corrupt	`named-checkzone`
`REFUSED`	Query tidak diizinkan	`allow-query`
`NXDOMAIN`	Record tidak ditemukan	Cek nama record
Timeout	Firewall blok port 53	`ufw allow 53`
Serial tidak update	Lupa increment serial	Ganti serial number

Keamanan DNS

1
# Batasi akses
2
allow-query { 192.168.10.0/24; };
3
allow-transfer { 192.168.10.2; };  # Hanya secondary DNS
4

5
# DNSSEC
6
dnssec-enable yes;
7
dnssec-validation yes;
8

9
# Hide version
10
version "Not disclosed";

Kesimpulan

DNS server adalah fondasi infrastruktur jaringan. Dengan BIND9 di Debian 10, kamu bisa membangun:

Caching server — mempercepat akses internet
Authoritative server — mengelola domain sendiri
Combined setup — caching + authoritative

Di artikel selanjutnya: LAMP vs LEMP Stack — web server dengan Apache/Nginx + MariaDB + PHP.

Referensi: Pramudika, A. Debian 10 Server Administration. ISC BIND Documentation.

Thanks for reading!

DNS Server di Debian 10: Panduan Lengkap Caching DNS, Forwarding, dan Authoritative DNS dengan BIND9

Thu Jun 25 2026

550 words · 6 minutes

Teknologi Debian DNS BIND9 Server Linux Networking SysAdmin