一、AdGuardHome

拦截广告、跟踪器、网络钓鱼和其他网络烦扰。
AdGuard Home 是一款全网广告拦截与反跟踪软件。它将保护您所有家用设备，同时您不再需要安装任何客户端软件。随着物联网与连接设备的兴起，掌控您自己的整个网络环境变得越来越重要。
拦截广告、跟踪器、网络钓鱼和其他网络烦扰。
https://adguard.com/zh_cn/adguard-home/overview.html
https://github.com/AdguardTeam/AdGuardHome

1.安装

k8s方式安装

https://truecharts.org/charts/stable/adguard-home/

helm upgrade --install -n dns --create-namespace adguard-home oci://tccr.io/truecharts/adguard-home

# https://doc.traefik.io/traefik/reference/routing-configuration/kubernetes/crd/http/ingressroute/ 
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-host
  namespace: dns
spec:
  entryPoints:
    - web
  routes:
    - match: "Host(`adguard-home.k8s.home.love`)"
      kind: Rule
      services:
        - name: adguard-home
          port: 10232

docker方式安装

docker rm -f adguardhome;
docker run -d --name adguardhome \
  --network macvlan --ip=192.168.130.253 \
  -p 53:53/tcp -p 53:53/udp \
  -p 67:67/udp -p 68:68/udp \
  -p 80:80/tcp -p 443:443/tcp -p 443:443/udp -p 3000:3000/tcp \
  -p 853:853/tcp \
  -p 784:784/udp -p 853:853/udp -p 8853:8853/udp \
  -p 5443:5443/tcp -p 5443:5443/udp \
	-e TZ=Asia\Shanghai \
  -v /root/adguardhome/work:/opt/adguardhome/work \
  -v /root/adguardhome/conf:/opt/adguardhome/conf \
  --restart always --privileged \
adguard/adguardhome

2.配置

2.1 配置DNS

设置 > DNS设置 > 上游 DNS 服务器

已知的 DNS 提供商

# Ali DNS
223.5.5.5
223.6.6.6
# Google DNS
8.8.4.4
8.8.8.8
# 114DNS
114.114.114.114
114.114.115.115

2.2 配置黑名单

• 过滤器 > DNS 黑名单

adblockfilters
https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockdns.txt

AdRules

GitHub520
https://raw.hellogithub.com/hosts

sudo sh -c 'sed -i "/# GitHub520 Host Start/Q" /etc/hosts && curl https://raw.hellogithub.com/hosts >> /etc/hosts'

• 过滤器 > 自定义过滤规则

禁用1panel收集信息
||o1098464.ingest.sentry.io^

效果如下：

3.教程

bilibili

二、PDNS

即PowerDNS，可视化配置域名

https://gitee.com/duhongming/docker-compose/tree/master/pdns

docker-compose up -d

注意其中的环境变量，PDNS API是否允许特定网段访问

 pdns-mysql-master:
   environment:
      - PDNS_webserver_allow_from=172.6.0.0/16,192.168.0.0/16

三、external-dns

为 Kubernetes 中的入口（Ingress、Traefik）和服务（Service）配置外部域名系统（DNS）服务器（如亚马逊云服务的 Route53、谷歌云的 CloudDNS 以及其他服务器PDNS）
配置PDNS

1.配置

values.yaml

# Copyright Broadcom, Inc. All Rights Reserved.
# SPDX-License-Identifier: APACHE-2.0

## @param provider DNS provider where the DNS records will be created.
## Available providers are:
## - akamai, alibabacloud, aws, azure, azure-private-dns, cloudflare, coredns, designate, digitalocean, google, hetzner, infoblox, linode, rfc2136, transip, oci
##
provider: pdns

## Compatibility adaptations for Traefik
##
traefik:
  ## @param traefik.disableNew Disable listeners on Resources under traefik.io
  ##
  disableNew: false
  ## @param traefik.disableLegacy Disable listeners on Resources under traefik.containo.us
  ##
  disableLegacy: false

## PowerDNS configuration to be set via arguments/env. variables
##
pdns:
  ## @param pdns.apiUrl When using the PowerDNS provider, specify the API URL of the server.
  ##
  apiUrl: "http://192.168.130.254"
  ## @param pdns.apiPort When using the PowerDNS provider, specify the API port of the server.
  ##
  apiPort: "8081"
  ## @param pdns.apiKey When using the PowerDNS provider, specify the API key of the server.
  ##
  apiKey: "secret"
  ## @param pdns.secretName When using the PowerDNS provider, specify as secret name containing the API Key
  ##
  secretName: ""

2.安装

helm upgrade --install -n dns --create-namespace my-external-dns bitnami/external-dns --version 8.7.7 -f values.yaml

3.查看日志

2025-03-23T09:58:46.896259921+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: grafana.k8s.home.love 0 IN A  192.168.141.254 []"

2025-03-23T09:58:46.896286825+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: my-service.home.love 0 IN A  192.168.170.6 []"

2025-03-23T09:58:46.896302905+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: juicefs.k8s.home.love 0 IN A  192.168.141.254 []"

2025-03-23T09:58:46.896316451+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: grafana.k8s.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=ingress/kubesphere-monitoring-system/ingress-host\" []"

2025-03-23T09:58:46.896320234+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: a-grafana.k8s.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=ingress/kubesphere-monitoring-system/ingress-host\" []"

2025-03-23T09:58:46.896329028+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: my-service.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=service/default/my-service\" []"

2025-03-23T09:58:46.896332361+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: a-my-service.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=service/default/my-service\" []"

2025-03-23T09:58:46.896335961+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: juicefs.k8s.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=ingress/kube-system/ingress-host\" []"

2025-03-23T09:58:46.896339166+08:00 time="2025-03-23T01:58:46Z" level=info msg="CREATE: a-juicefs.k8s.home.love 0 IN TXT  \"heritage=external-dns,external-dns/owner=default,external-dns/resource=ingress/kube-system/ingress-host\" []"

2025-03-23T09:58:46.900736475+08:00 time="2025-03-23T01:58:46Z" level=info msg="Changes pushed out to PowerDNS in 4.475959ms\n"