主从 DNS

最新推荐文章于 2025-04-09 14:48:08 发布

万里长城万里长

最新推荐文章于 2025-04-09 14:48:08 发布

阅读量474

点赞数 1

文章标签： Linux

本文链接：https://blog.youkuaiyun.com/PZYFCT_2018/article/details/91284661

版权

搭建主DNS服务器

一块网卡为vmnet1

1.修改网络配置

1)vim /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=192.168.1.254
NETMASK=255.255.255.0
DNS1=192.168.1.254
DNS2=192.168.1.222

2)/etc/init.d/network restart

3)vim /etc/sysconfig/network

2.安装bind软件包

1)yum -y install bind bind-utils

3.编辑主配置文件

1)vim /etc/named.conf

options {
   listen-on port 53 { 192.168.1.254; };                   //设置监听IP地址；需修改
   directory    "/var/named";                       //区域配置文件存放目录
   dump-file    "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";\
   allow-query {localhost;};                       //删除该行
   recursion yes;

   forwarders {114.114.114.114;8.8.8.8;};                   //转发器设置，将所有DNS查询请求转发
   dnssec-enable no;                           //bind安全检测机制；需修改
   dnssec-validation no;                           //bind安全检测机制；需修改
   dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "hehe.com" IN {                               //指定正向解析域为xueluo.org
   type master;                               //指定DNS类型，为主DNS服务器
   file "hehe.com";                           //正向解析文件
   allow-transfer {192.168.1.222;};                       //允许同步服务器IP
};

zone "1.168.192.in-addr.arpa" IN {                       //指定反向解析区域
   type master;                               //指定DNS类型，为主DNS服务器
   file "192.168.1.arpa";                           //反向解析文件
   allow-transfer {192.168.1.222;};                       //允许同步服务器IP
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

2)cp /var/named/named.empty /var/named/hehe.com.zone //拷贝DNS模版文件并重命名

3)cp /var/named/named.empty /var/named/192.168.1.arpa

4)vim /var/named/hehe.com.zone

$TTL 86400(TTL值，生命周期)
@   IN SOA hehe.com(需要解析的域名) admin.xueluo.org.(管理员邮箱) (
                   0   ; serial
                   1D   ; refresh
                   1H   ; retry
                   1W   ; expire
                   3H )   ; minimum
   IN   NS   ns1.hehe.com.       //NS记录(起始授权记录)；输入主DNS和从DNS服务器的主机名
   IN   NS   ns2.hehe.com.
ns1   IN   A   192.168.1.254 //DNS服务器对应的IP地址
ns2   IN   A   192.168.1.222

5)vim /var/named/192.168.1.arpa

$TTL 86400(TTL值，生命周期)
@   IN SOA   xueluo.org.(需要解析的域名) admin.xueluo.org.(管理员邮箱) (
                   0   ; serial
                   1D   ; refresh
                   1H   ; retry
                   1W   ; expire
                   3H )   ; minimum
   IN   NS   ns1.hehe.com.       //NS记录(起始授权记录)；输入主DNS和从DNS服务器的主机名
   IN   NS   ns2.hehe.com.

6)/etc/init.d/named start && chkconfig --level 35 named on

chown named:named /var/named/192.168.1.arpa /var/named/hehe.com

从DNS搭建

一块网卡为vmnet1

1.修改网络配置

1)vim /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=192.168.1.222
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=192.168.1.222

DNS2=192.168.1.254

2)/etc/init.d/network restart

3)vim /etc/sysconfig/network

2.安装bind软件包

1)yum -y install bind bind-utils bind-chroot

3.编辑主配置文件

1)scp root@192.168.1.10:/etc/named.conf /etc/

2)vim /etc/named.conf

options {
   listen-on port 53 { 192.168.1.222; };                   //设置监听IP地址；需修改
   directory    "/var/named";
   dump-file    "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";\
   recursion yes;

   forwarders {114.114.114.114;8.8.8.8;};
   dnssec-enable no;
   dnssec-validation no;
   dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "xueluo.org" IN {
   type slave;                               //指定DNS类型，为从DNS服务器
   file "slaves/xueluo.org.zone";                       //指定同步后正向解析文件存储路径
   masters {192.168.1.254;};                       //指定主DNS对应IP
};

zone "1.168.192.in-addr.arpa" IN {
   type slave;                               //指定DNS类型，为从DNS服务器
   file "slaves/192.168.1.arpa";                       //指定同步后反向解析文件存储路径
   masters {192.168.1.254;};                       //指定主DNS对应IP
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";