Centos使用Bind配置智能DNS的教程
主DNS服务器:
[root@Master /]# cat /etc/redhat-release
CentOS release 6.4 (Final)
[root@Master /]# uname -a
Linux Master 2.6.32-358.el6.x86_64 #1 SMP Fri Feb 22 00:31:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
[root@Master /]# ifconfig | grep "inet addr"
inet addr:1.1.1.19 Bcast:1.1.1.255 Mask:255.255.255.0
[root@MASTER /]# ifconfig eth0:0 192.168.1.19 netmask 255.255.255.0
从DNS服务器:
[root@Slave ~]# cat /etc/redhat-release
CentOS release 6.7 (Final)
[root@Slave ~]# uname -a
Linux Slave 2.6.32-573.18.1.el6.x86_64 #1 SMP Tue Feb 9 22:46:17 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
[root@Slave ~]# ifconfig | grep "inet addr"
inet addr:1.1.1.20 Bcast:1.1.1.255 Mask:255.255.255.0
主DNS服务器编译:
[root@Master /]# mkdir /byrd/tools -p
[root@Master /]# mkdir /byrd/service
[root@Master /]# cd /byrd/tools/
[root@MASTER tools]# wget http://mirrors.sohu.com/mysql/MySQL-5.6/mysql-5.6.28.tar.gz
[root@MASTER tools]# tar zxf mysql-5.6.28.tar.gz
[root@MASTER tools]# cd mysql-5.6.28
[root@MASTER mysql-5.6.28]# cmake . -DCMAKE_INSTALL_PREFIX=/byrd/service/mysql-5.6.28 -DMYSQL_DATADIR=/byrd/service/mysql-5.6.28/data -DMYSQL_UNIX_ADDR=/byrd/service/mysql-5.6.28/tmp/mysql.sock -DMYSQL_USER=mysql -DDEFAULT_CHARSET=utf8 -DDEFAULT_COLLATION=utf8_general_ci -DENABLED_LOCAL_INFILE=ON -DWITH_INNOBASE_STORAGE_ENGINE=1 -DWITH_FEDERATED_STORAGE_ENGINE=1 -DWITH_BLACKHOLE_STORAGE_ENGINE=1 -DWITHOUT_EXAMPLE_STORAGE_ENGINE=1
[root@MASTER mysql-5.6.28]# make && make install
[root@MASTER mysql-5.6.28]# groupadd mysql
[root@MASTER mysql-5.6.28]# useradd -s /sbin/nologin -g mysql mysql
[root@MASTER mysql-5.6.28]# ln -s /byrd/service/mysql-5.6.28 /usr/local/mysql
[root@MASTER mysql-5.6.28]# /usr/local/mysql/scripts/mysql_install_db --basedir=/usr/local/mysql/ --datadir=/usr/local/mysql/data/ --user=mysql
[root@MASTER mysql-5.6.28]# cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@MASTER mysql-5.6.28]# mv /etc/my.cnf /etc/my.cnf.backup
[root@MASTER mysql-5.6.28]# cp /usr/local/mysql/support-files/my-default.cnf /etc/my.cnf
[root@MASTER mysql-5.6.28]# /etc/init.d/mysqld start
[root@MASTER mysql-5.6.28]# cd ..
[root@Master tools]# wget ftp://ftp.isc.org/isc/bind9/9.9.8/bind-9.9.8.tar.gz
[root@Master tools]# tar zxf bind-9.9.8.tar.gz
[root@Master tools]# cd bind-9.9.8
[root@Master bind-9.9.8]# ./configure -h
[root@MASTER bind-9.9.8]# ./configure --prefix=/byrd/service/bind-9.9.8 --with-dlz-mysql=/usr/local/mysql --with-libtool --enable-threads --enable-ipv6 --with-dlz-filesystem=yes 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE'
[root@Master bind-9.9.8]# make && make install
/usr/bin/install -c -m 644 ./bind.keys /byrd/service/bind-9.9.8/etc
[root@Master bind-9.9.8]# ln -s /byrd/service/bind-9.9.8 /usr/local/named
[root@Master bind-9.9.8]# groupadd -r named -g 25
[root@Master bind-9.9.8]# useradd named -u 25 -g named -d /byrd/service/bind-9.9.8/ -s /sbin/nologin
主DNS服务器配置:
[root@Master bind-9.9.8]# cd /usr/local/named/etc
[root@Master etc]# mkdir /var/named
[root@Master etc]# chown -R named:named /var/named/
[root@Master etc]# chown -R named:named /usr/local/named
[root@Master etc]# chmod 700 /usr/local/named/etc/
[root@Master etc]# chown -R named.named /usr/local/named/etc/
[root@Master etc]# cd /var/named/
[root@MASTER named]# /usr/local/named/bin/dig > named.root #wget https://www.internic.net/domain/named.root
[root@MASTER named]# chown -R root.named /var/named/named.root
[root@Master named]# /usr/local/named/sbin/rndc-confgen > /usr/local/named/etc/rndc.conf #/usr/local/named/sbin/rndc-confgen -r /dev/urandom > /usr/local/named/etc/rndc.conf
[root@Master named]# tail /usr/local/named/etc/rndc.conf | head -9 |sed s/\#//g > /usr/local/named/etc/named.conf
[root@Master named]# cd -
[root@Master etc]# chown -R named.named /usr/local/named/var/
[root@MASTER etc]# mkdir {/var/named/data,/var/named/zones} -p
[root@MASTER etc]# chown -R named.named {/var/named/data,/var/named/zones}
[root@MASTER etc]# grep -v "#" /var/local/named/etc/named.conf
[root@MASTER zones]# cat /usr/local/named/etc/named.conf
// named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
bindkeys-file "/usr/local/named/etc/bind.key";
allow-transfer { 1.1.1.20; };
# forwarders {114.114.114.114;};
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
channel gsquery {
file "data/query.log" versions 3 size 20m;
severity info;
print-time yes;
print-category yes;
print-severity yes;
};
category queries { gsquery; };
};
key "rndc-key" {
algorithm hmac-md5;
secret "ovH1P5Jg000GLBWJYifXRQ==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
include "/var/named/named.rfc1912.zones";
[root@MASTER zones]# cat /var/named/named.rfc1912.zones
zone "localhost" IN {
type master;
file "zones/named.localhost";
allow-update { none; };
};
zone "1.0.0.127.in-addr.arpa" IN {
type master;
file "zones/named.loopback";
allow-update { none; };
};
zone "111cn.net " IN {
type master;
file "zones/111cn.net .zone";
allow-update { none; };
allow-transfer { 1.1.1.20; };
notify yes;
also-notify { 1.1.1.20; }; #允许slave主机以外的备份
};
zone "1.168.192.in-addr.arpa" {
type master;
file "zones/192.168.1.zone";
allow-update { none; };
notify yes;
allow-transfer { 1.1.1.20; };
};
[root@MASTER zones]# cat /var/named/zones/111cn.net .zone
$TTL 600
@ IN SOA ns1.111cn.net . admin.111cn.net . (
2015050702 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
IN NS ns1
IN NS ns2.111cn.net .
IN A 1.1.1.19
ns1 IN A 1.1.1.19
ns2 IN A 1.1.1.20
www IN A 192.168.1.19
bbs IN A 192.168.1.92
qwer IN A 1.2.3.4
test IN CNAME www
blog IN CNAME www
[root@MASTER zones]# cat /var/named/zones/192.168.1.zone
$TTL 1D
@ IN SOA ns1.111cn.net . admin.111cn.net . (
2015050701 ; serial
10 ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
@ IN NS ns1.111cn.net .
@ IN NS ns2.111cn.net .
PTR localhost.
19 IN PTR ns1.111cn.net .
20 IN PTR ns2.111cn.net .
19 IN PTR www.111cn.net .
19 IN PTR ww.111cn.net .
[root@MASTER zones]# cat named.localhost
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
AAAA ::1
PTR localhost.
[root@MASTER zones]# cat named.loopback
$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
AAAA ::1
PTR localhost.
[root@MASTER zones]# /usr/local/named/sbin/named -c /usr/local/named/etc/named.conf -4u named
正解、反解测试:
[root@MASTER zones]# /usr/local/named/bin/dig www.111cn.net
;; QUESTION SECTION:
;www.111cn.net . IN A
;; ANSWER SECTION:
www.111cn.net . 600 IN A 192.168.1.19
;; AUTHORITY SECTION:
111cn.net . 600 IN NS ns1.111cn.net .
;; ADDITIONAL SECTION:
ns1.111cn.net . 600 IN A 1.1.1.19
[root@MASTER zones]# /usr/local/named/bin/dig blog.111cn.net
;; QUESTION SECTION:
;blog.111cn.net . IN A
;; ANSWER SECTION:
blog.111cn.net . 600 IN CNAME www.111cn.net .
www.111cn.net . 600 IN A 192.168.1.19
[root@MASTER zones]# /usr/local/named/bin/dig -x 192.168.1.19
;; QUESTION SECTION:
;19.1.168.192.in-addr.arpa. IN PTR
;; ANSWER SECTION:
19.1.168.192.in-addr.arpa. 86400 IN PTR www.111cn.net .
19.1.168.192.in-addr.arpa. 86400 IN PTR ns1.111cn.net .
;; AUTHORITY SECTION:
1.168.192.in-addr.arpa. 86400 IN NS ns1.111cn.net .
;; ADDITIONAL SECTION:
ns1.111cn.net . 600 IN A 1.1.1.19
[root@MASTER zones]# /usr/local/named/bin/dig -x 192.168.1.92
;; QUESTION SECTION:
;92.1.168.192.in-addr.arpa. IN PTR
;; ANSWER SECTION:
92.1.168.192.in-addr.arpa. 86400 IN PTR bbs.111cn.net .
;; AUTHORITY SECTION:
1.168.192.in-addr.arpa. 86400 IN NS ns1.111cn.net .
从DNS服务器编译:
[root@Slave bind-9.9.8]# yum install vim get openssl openssl-devel lrzsz dos2unix gcc gcc-c++ -y
[root@Slave ~]# mkdir /byrd/tools -p
[root@Slave ~]# mkdir /byrd/service
[root@Slave ~]# cd /byrd/tools/
[root@Slave tools]# wget ftp://ftp.isc.org/isc/bind9/9.9.8/bind-9.9.8.tar.gz
[root@Slave tools]# tar zxf bind-9.9.8.tar.gz
[root@Slave tools]# cd bind-9.9.8
[root@Slave bind-9.9.8]# ./configure --prefix=/byrd/service/bind-9.9.8 --with-libtool --enable-threads --enable-ipv6 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE'
[root@Slave bind-9.9.8]# make && make install
[root@Slave bind-9.9.8]# /usr/local/named/sbin/rndc-confgen -r /dev/urandom > /usr/local/named/etc/rndc.conf
[root@Slave etc]# tail /usr/local/named/etc/rndc.conf | head -9 |sed s/\#//g > /usr/local/named/etc/named.conf
[root@Slave etc]# mkdir {/var/named/data,/var/named/slaves