百分百源码网-让建站变得如此简单! 登录 注册 签到领金币!

主页 | 如何升级VIP | TAG标签

当前位置: 主页>网站教程>服务器> Centos使用Bind配置智能DNS的教程
分享文章到:

Centos使用Bind配置智能DNS的教程

发布时间:01/15 来源: 浏览: 关键词:
下面我们来看一篇关于Centos使用Bind配置智能DNS的教程,希望这篇教程能够帮助到各位朋友,有兴趣的朋友可以进来参考一下。

主DNS服务器:

[root@Master /]# cat /etc/redhat-release
CentOS release 6.4 (Final)
[root@Master /]# uname -a
Linux Master 2.6.32-358.el6.x86_64 #1 SMP Fri Feb 22 00:31:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
[root@Master /]# ifconfig | grep "inet addr"
          inet addr:1.1.1.19  Bcast:1.1.1.255  Mask:255.255.255.0
[root@MASTER /]#  ifconfig eth0:0 192.168.1.19 netmask 255.255.255.0 

从DNS服务器:


[root@Slave ~]# cat /etc/redhat-release
CentOS release 6.7 (Final)
[root@Slave ~]# uname -a
Linux Slave 2.6.32-573.18.1.el6.x86_64 #1 SMP Tue Feb 9 22:46:17 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
[root@Slave ~]# ifconfig | grep "inet addr"
          inet addr:1.1.1.20  Bcast:1.1.1.255  Mask:255.255.255.0
主DNS服务器编译:


[root@Master /]# mkdir /byrd/tools -p   
[root@Master /]# mkdir /byrd/service   
[root@Master /]# cd /byrd/tools/
[root@MASTER tools]# wget http://mirrors.sohu.com/mysql/MySQL-5.6/mysql-5.6.28.tar.gz  
[root@MASTER tools]# tar zxf mysql-5.6.28.tar.gz
[root@MASTER tools]# cd mysql-5.6.28
[root@MASTER mysql-5.6.28]# cmake . -DCMAKE_INSTALL_PREFIX=/byrd/service/mysql-5.6.28 -DMYSQL_DATADIR=/byrd/service/mysql-5.6.28/data -DMYSQL_UNIX_ADDR=/byrd/service/mysql-5.6.28/tmp/mysql.sock -DMYSQL_USER=mysql -DDEFAULT_CHARSET=utf8 -DDEFAULT_COLLATION=utf8_general_ci -DENABLED_LOCAL_INFILE=ON -DWITH_INNOBASE_STORAGE_ENGINE=1 -DWITH_FEDERATED_STORAGE_ENGINE=1 -DWITH_BLACKHOLE_STORAGE_ENGINE=1 -DWITHOUT_EXAMPLE_STORAGE_ENGINE=1
[root@MASTER mysql-5.6.28]# make && make install
[root@MASTER mysql-5.6.28]# groupadd mysql
[root@MASTER mysql-5.6.28]# useradd -s /sbin/nologin -g mysql mysql
[root@MASTER mysql-5.6.28]# ln -s /byrd/service/mysql-5.6.28 /usr/local/mysql
[root@MASTER mysql-5.6.28]# /usr/local/mysql/scripts/mysql_install_db --basedir=/usr/local/mysql/ --datadir=/usr/local/mysql/data/ --user=mysql
[root@MASTER mysql-5.6.28]# cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@MASTER mysql-5.6.28]# mv /etc/my.cnf /etc/my.cnf.backup
[root@MASTER mysql-5.6.28]# cp /usr/local/mysql/support-files/my-default.cnf /etc/my.cnf
[root@MASTER mysql-5.6.28]# /etc/init.d/mysqld start
[root@MASTER mysql-5.6.28]# cd ..
[root@Master tools]# wget ftp://ftp.isc.org/isc/bind9/9.9.8/bind-9.9.8.tar.gz   
[root@Master tools]# tar zxf bind-9.9.8.tar.gz   
[root@Master tools]# cd bind-9.9.8   
[root@Master bind-9.9.8]# ./configure -h 
[root@MASTER bind-9.9.8]# ./configure --prefix=/byrd/service/bind-9.9.8 --with-dlz-mysql=/usr/local/mysql --with-libtool --enable-threads --enable-ipv6 --with-dlz-filesystem=yes 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE'
[root@Master bind-9.9.8]# make && make install
/usr/bin/install -c -m 644 ./bind.keys /byrd/service/bind-9.9.8/etc
[root@Master bind-9.9.8]# ln -s /byrd/service/bind-9.9.8 /usr/local/named
[root@Master bind-9.9.8]# groupadd -r named -g 25
[root@Master bind-9.9.8]# useradd named -u 25 -g named -d /byrd/service/bind-9.9.8/ -s /sbin/nologin

主DNS服务器配置:

[root@Master bind-9.9.8]# cd /usr/local/named/etc
[root@Master etc]# mkdir /var/named
[root@Master etc]# chown -R named:named /var/named/
[root@Master etc]# chown -R named:named /usr/local/named
[root@Master etc]# chmod 700 /usr/local/named/etc/
[root@Master etc]# chown -R named.named /usr/local/named/etc/
[root@Master etc]# cd /var/named/
[root@MASTER named]# /usr/local/named/bin/dig > named.root    #wget https://www.internic.net/domain/named.root
[root@MASTER named]# chown -R root.named /var/named/named.root
[root@Master named]# /usr/local/named/sbin/rndc-confgen > /usr/local/named/etc/rndc.conf    #/usr/local/named/sbin/rndc-confgen -r /dev/urandom > /usr/local/named/etc/rndc.conf
[root@Master named]# tail /usr/local/named/etc/rndc.conf | head -9 |sed s/\#//g > /usr/local/named/etc/named.conf
[root@Master named]# cd -
[root@Master etc]# chown -R named.named  /usr/local/named/var/
[root@MASTER etc]# mkdir {/var/named/data,/var/named/zones} -p
[root@MASTER etc]# chown -R named.named {/var/named/data,/var/named/zones}
[root@MASTER etc]# grep -v "#" /var/local/named/etc/named.conf    
[root@MASTER zones]# cat /usr/local/named/etc/named.conf
// named.conf
options {
        listen-on port 53 { any; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
        bindkeys-file "/usr/local/named/etc/bind.key";
        allow-transfer { 1.1.1.20; };
#        forwarders {114.114.114.114;};
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
        channel gsquery {
                file "data/query.log"   versions 3 size 20m;
                severity info;
                print-time yes;
                print-category yes;
                print-severity yes;
        };
        category queries { gsquery; };
};
key "rndc-key" {
        algorithm hmac-md5;
        secret "ovH1P5Jg000GLBWJYifXRQ==";
};
 
controls {
        inet 127.0.0.1 port 953
                allow { 127.0.0.1; } keys { "rndc-key"; };
};
include "/var/named/named.rfc1912.zones";
[root@MASTER zones]# cat /var/named/named.rfc1912.zones
zone "localhost" IN {
        type master;
        file "zones/named.localhost";
        allow-update { none; };
};
zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "zones/named.loopback";
        allow-update { none; };
};
zone "111cn.net " IN {
        type master;
        file "zones/111cn.net .zone";
        allow-update { none; };
        allow-transfer { 1.1.1.20; };
        notify yes;
        also-notify { 1.1.1.20; };   #允许slave主机以外的备份
};
zone "1.168.192.in-addr.arpa" {
        type master;
        file "zones/192.168.1.zone";
        allow-update { none; };
        notify yes;
        allow-transfer { 1.1.1.20; };
};
[root@MASTER zones]# cat /var/named/zones/111cn.net .zone
$TTL 600
@        IN       SOA         ns1.111cn.net .      admin.111cn.net . (
                              2015050702       ; serial
                              1D               ; refresh
                              1H               ; retry
                              1W               ; expire
                              3H )             ; minimum
          IN      NS          ns1
          IN      NS          ns2.111cn.net .
          IN      A           1.1.1.19
ns1       IN      A           1.1.1.19
ns2       IN      A           1.1.1.20
www       IN      A           192.168.1.19
bbs       IN      A           192.168.1.92
qwer      IN      A           1.2.3.4
test      IN      CNAME       www
blog      IN      CNAME       www
[root@MASTER zones]# cat /var/named/zones/192.168.1.zone
$TTL 1D
@               IN      SOA             ns1.111cn.net .     admin.111cn.net . (
                                        2015050701       ; serial
                                        10               ; refresh
                                        1H               ; retry
                                        1W               ; expire
                                        3H )             ; minimum
@               IN      NS              ns1.111cn.net .
@               IN      NS              ns2.111cn.net .
                        PTR             localhost.
19              IN      PTR             ns1.111cn.net .
20              IN      PTR             ns2.111cn.net .
19              IN      PTR             www.111cn.net .
19              IN      PTR             ww.111cn.net .
[root@MASTER zones]# cat named.localhost
$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       127.0.0.1
        AAAA    ::1
        PTR     localhost.
[root@MASTER zones]# cat named.loopback
$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       127.0.0.1
        AAAA    ::1
        PTR     localhost.

[root@MASTER zones]# /usr/local/named/sbin/named -c /usr/local/named/etc/named.conf -4u named

正解、反解测试:

[root@MASTER zones]# /usr/local/named/bin/dig www.111cn.net
 
;; QUESTION SECTION:
;www.111cn.net .                   IN      A
;; ANSWER SECTION:
www.111cn.net .            600     IN      A       192.168.1.19
;; AUTHORITY SECTION:
111cn.net .                600     IN      NS      ns1.111cn.net .
;; ADDITIONAL SECTION:
ns1.111cn.net .            600     IN      A       1.1.1.19
 
[root@MASTER zones]# /usr/local/named/bin/dig blog.111cn.net
 
;; QUESTION SECTION:
;blog.111cn.net .                  IN      A
;; ANSWER SECTION:
blog.111cn.net .           600     IN      CNAME   www.111cn.net .
www.111cn.net .            600     IN      A       192.168.1.19
 
[root@MASTER zones]# /usr/local/named/bin/dig -x 192.168.1.19
 
;; QUESTION SECTION:
;19.1.168.192.in-addr.arpa.     IN      PTR
;; ANSWER SECTION:
19.1.168.192.in-addr.arpa. 86400 IN     PTR     www.111cn.net .
19.1.168.192.in-addr.arpa. 86400 IN     PTR     ns1.111cn.net .
;; AUTHORITY SECTION:
1.168.192.in-addr.arpa. 86400   IN      NS      ns1.111cn.net .
;; ADDITIONAL SECTION:
ns1.111cn.net .            600     IN      A       1.1.1.19
 
[root@MASTER zones]# /usr/local/named/bin/dig -x 192.168.1.92
 
;; QUESTION SECTION:
;92.1.168.192.in-addr.arpa.     IN      PTR
;; ANSWER SECTION:
92.1.168.192.in-addr.arpa. 86400 IN     PTR     bbs.111cn.net .
;; AUTHORITY SECTION:
1.168.192.in-addr.arpa. 86400   IN      NS      ns1.111cn.net .

从DNS服务器编译:


[root@Slave bind-9.9.8]# yum install vim get openssl openssl-devel lrzsz dos2unix gcc gcc-c++ -y
[root@Slave ~]# mkdir /byrd/tools -p
[root@Slave ~]# mkdir /byrd/service
[root@Slave ~]# cd /byrd/tools/
[root@Slave tools]# wget ftp://ftp.isc.org/isc/bind9/9.9.8/bind-9.9.8.tar.gz
[root@Slave tools]# tar zxf bind-9.9.8.tar.gz
[root@Slave tools]# cd bind-9.9.8
[root@Slave bind-9.9.8]# ./configure --prefix=/byrd/service/bind-9.9.8  --with-libtool --enable-threads --enable-ipv6 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE'
[root@Slave bind-9.9.8]# make && make install
[root@Slave bind-9.9.8]# /usr/local/named/sbin/rndc-confgen -r /dev/urandom > /usr/local/named/etc/rndc.conf
[root@Slave etc]# tail /usr/local/named/etc/rndc.conf | head -9 |sed s/\#//g > /usr/local/named/etc/named.conf
[root@Slave etc]# mkdir {/var/named/data,/var/named/slaves

打赏

打赏

取消

感谢您的支持,我会继续努力的!

扫码支持
扫码打赏,你说多少就多少

打开支付宝扫一扫,即可进行扫码打赏哦

百分百源码网 建议打赏1~10元,土豪随意,感谢您的阅读!

共有11人阅读,期待你的评论!发表评论
昵称: 网址: 验证码: 点击我更换图片
最新评论

本文标签

广告赞助

能出一分力是一分吧!

订阅获得更多模板

本文标签

广告赞助

订阅获得更多模板