美文网首页
马哥Linux第十三周

马哥Linux第十三周

作者: Liang_JC | 来源:发表于2020-05-15 11:05 被阅读0次

Q1、简述DNS服务器原理，并搭建主-辅服务器

  1. 客户端发起请求(www.test.com)到本地DNS服务器

  2. 本地DNS服务器询问根服务器

  3. 根服务器告诉本地DNS顶级域(.com)的服务器地址

  4. 顶级域(.com)发现test是子域，告诉本地DNS地址(test.com)

  5. test.com查询后得到IP地址，返回给本地DNS服务器

  6. 本地DNS把结果反馈给客户端

    #DNS1-master
[root@DNS1 ~]# yum install -y bind
[root@DNS1 ~]# vim /etc/named.conf 
options {
    //listen-on port 53 { 127.0.0.1; };
     ...
    //allow-query     { localhost; };
    allow-transfer { 192.168.37.27; };
 ...
}

[root@DNS1 ~]# vim /etc/named.rfc1912.zones 
zone "magedu.site" IN {
    type master;
    file "magedu.site.zone";                                                                                       
};
zone "37.168.192.in-addr.arpa" IN {                                                                                
    type master;
    file "192.168.37.zone";
};

[root@DNS1 ~]# vim /var/named/magedu.site.zone
$TTL 1D
@   IN SOA  master.magedu.site admin.magedu.site (
                    0   ;版本号(同步作用) 
                    10M  ;刷新时间  
                    1H  ;重试时间  
                    1W  ;过期时间
                    3H )    ;不存在记录的缓存的时间
    NS  ns1
    NS   ns2
ns1 A   192.168.37.17
ns2 A   192.168.37.27
www CNAME webs
webs A 192.168.37.17
webs A 192.168.37.27

[root@DNS1 ~]# vim /var/named/192.168.37.zone 
$TTL 1D
@ IN SOA  ns1 admin   ( 0 10M 1H 1W 3h ) 

        NS  ns1
        NS  ns2
ns1     A   192.168.37.17
ns2     A   192.168.37.27
17      PTR ns1.magedu.site
27      PTR ns2.magedu.site

[root@DNS1 ~]# named-checkconf
[root@DNS1 ~]# named-checkzone magedu.site /var/named/magedu.site.zone
[root@DNS1 ~]# named-checkzone magedu.site /var/named/192.168.37.zone
[root@DNS1 ~]# systemctl start named

#DNS2-slave
[root@DNS2 ~]# yum install -y bind
[root@DNS2 ~]# vim /etc/named.conf 
options {
        //listen-on port 53 { 127.0.0.1; };
        ....
        //allow-query     { localhost; };
        allow-transfer { none; };
}

[root@DNS2 ~]# vim /etc/named.rfc1912.zones
zone "magedu.site" IN {
    type slave;
    masters { 192.168.37.17; };
    file "slaves/magedu.site.zone";  
};  
zone "37.168.192.in-addr.arpa" IN {  
    type slave;  
    masters { 192.168.37.17; };  
    file "slaves/192.168.37.zone";  
}; 

[root@DNS2 ~]# systemctl start named
[root@DNS2 ~]# ls -lh /var/named/slaves/
total 8.0K
-rw-r--r-- 1 named named 416 May 14 21:11 192.168.37.zone
-rw-r--r-- 1 named named 256 May 14 21:11 magedu.site.zone

#client测试：
[root@centos6 ~]$ vim /etc/resolv.conf
nameserver 192.168.37.17
nameserver 192.168.37.27

[root@centos6 ~]$ dig www.magedu.site

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.magedu.site
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20481
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.magedu.site.        IN  A

;; ANSWER SECTION:
www.magedu.site. 86400   IN  CNAME   webs.magedu.site.
webs.magedu.site.    86400   IN  A   192.168.37.27
webs.magedu.site.    86400   IN  A   192.168.37.17

;; AUTHORITY SECTION:
magedu.site.     86400   IN  NS  ns2.magedu.site.
magedu.site.     86400   IN  NS  ns1.magedu.site.

;; ADDITIONAL SECTION:
ns1.magedu.site. 86400   IN  A   192.168.37.17
ns2.magedu.site. 86400   IN  A   192.168.37.27

;; Query time: 1 msec
;; SERVER: 192.168.37.17#53(192.168.37.17)
;; WHEN: Thu May 14 21:33:46 2020
;; MSG SIZE  rcvd: 152

[root@centos6 ~]$ dig -x 192.168.37.17

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> -x 192.168.37.17
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45464
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;17.37.168.192.in-addr.arpa. IN  PTR

;; ANSWER SECTION:
17.37.168.192.in-addr.arpa. 86400 IN PTR ns1.magedu.site.37.168.192.in-addr.arpa.

;; AUTHORITY SECTION:
37.168.192.in-addr.arpa. 86400   IN  NS  ns2.37.168.192.in-addr.arpa.
37.168.192.in-addr.arpa. 86400   IN  NS  ns1.37.168.192.in-addr.arpa.

;; ADDITIONAL SECTION:
ns1.37.168.192.in-addr.arpa. 86400 IN    A   192.168.37.17
ns2.37.168.192.in-addr.arpa. 86400 IN    A   192.168.37.27

;; Query time: 0 msec
;; SERVER: 192.168.37.17#53(192.168.37.17)
;; WHEN: Thu May 14 21:35:15 2020
;; MSG SIZE  rcvd: 142

Q2、搭建并实现智能DNS

#CDN分3个区域，beijing:192.168.37.0/24,guangdong:172.16.0.0/24,other
#CDN-server
1、安装
[root@CDN ~]# yum install bind -y

2、主配置文件添加acl
[root@CDN ~]# vim /etc/named.conf
options {
    //listen-on port 53 { 127.0.0.1; };
    listen-on-v6 port 53 { ::1; };
    directory   "/var/named";
    dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    recursing-file  "/var/named/data/named.recursing";
    secroots-file   "/var/named/data/named.secroots";
    //allow-query     { localhost; };

    recursion yes;

    dnssec-enable yes;
    dnssec-validation yes;

    bindkeys-file "/etc/named.root.key";

    managed-keys-directory "/var/named/dynamic";

    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

acl beijingnet {
    192.168.37.0/24;
};

acl guangdongnet {
    172.16.0.0/24;
};

acl othernet {
    any;
};

view view_beijing {
    match-clients { beijingnet; };
    include "/etc/named.rfc1912.zones.bj";
};

view view_guangdong {
    match-clients { guangdongnet; };
    include "/etc/named.rfc1912.zones.gd";
};

view view_other {
    match-clients { othernet; };
    include "/etc/named.rfc1912.zones.other";
};

//zone "." IN {
//  type hint;
//  file "named.ca";
//};

//include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

3、区域配置文件
[root@CDN ~]# vim /etc/named.rfc1912.zones.bj
zone "magedu.site" IN {
    type master;
    file "magedu.site.zone.bj";
};
zone "." IN {
    type hint;
    file "named.ca";
};

[root@CDN ~]# vim /etc/named.rfc1912.zones.gd
zone "magedu.site" IN {
    type master;
    file "magedu.site.zone.gd";
};
zone "." IN {
    type hint;
    file "named.ca";
};

[root@CDN ~]# vim /etc/named.rfc1912.zones.other
zone "magedu.site" IN {
    type master;
    file "magedu.site.zone.other"; 
};
zone "." IN {
    type hint;
    file "named.ca";
};

4、添加DNS解析
[root@CDN ~]# vim /var/named/magedu.site.zone.bj
$TTL 1D  
@   IN  SOA ns1 admin   ( 1 1H 1H 1D 3H )  
        NS  ns1  
▽s1     A   192.168.37.7  
www     A   192.168.37.100 

[root@CDN ~]# vim /var/named/magedu.site.zone.gd
$TTL 1D  
@   IN  SOA ns1 admin   ( 1 1H 1H 1D 3H )  
        NS  ns1  
▽s1     A   192.168.37.7  
www     A   172.16.0.100 

[root@CDN ~]# vim /var/named/magedu.site.zone.other
$TTL 1D  
@   IN  SOA ns1 admin   ( 1 1H 1H 1D 3H )  
        NS  ns1  
ns1     A   192.168.37.7  
www     A   8.8.8.8  

5、重启服务
[root@CDN ~]#  named-checkconf 
[root@CDN ~]#  named-checkzone magedu.site /var/named/magedu.site.zone.bj 
zone magedu.site/IN: loaded serial 1
OK
[root@CDN ~]#  named-checkzone magedu.site /var/named/magedu.site.zone.gd
zone magedu.site/IN: loaded serial 1
OK
[root@CDN ~]#  named-checkzone magedu.site /var/named/magedu.site.zone.other
zone magedu.site/IN: loaded serial 1
OK
[root@CDN ~]# systemctl start named

6、添加临时IP模拟测试
[root@CDN ~]# ip address add 172.16.0.7/24 dev eth0
[root@CDN ~]# ip address add 10.10.10.7/24 dev eth0

7、client测试：
[root@centos6 ~]$ vim /etc/resolv.conf
nameserver 192.168.37.7
[root@centos6 ~]$ ip address add 172.16.0.6/24 dev eth0
[root@centos6 ~]$ ip address add 10.10.0.6/24 dev eth0

[root@centos6 ~]$ dig www.magedu.site @192.168.37.7

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.magedu.site @192.168.37.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36992
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;www.magedu.site.       IN  A

;; ANSWER SECTION:
www.magedu.site.    86400   IN  A   192.168.37.100

;; AUTHORITY SECTION:
magedu.site.        86400   IN  NS  ns1.magedu.site.

;; ADDITIONAL SECTION:
ns1.magedu.site.    86400   IN  A   192.168.37.7

;; Query time: 0 msec
;; SERVER: 192.168.37.7#53(192.168.37.7)
;; WHEN: Thu May 14 22:21:51 2020
;; MSG SIZE  rcvd: 83

[root@centos6 ~]$ dig www.magedu.site @172.16.0.7

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.magedu.site @172.16.0.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48221
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;www.magedu.site.       IN  A

;; ANSWER SECTION:
www.magedu.site.    86400   IN  A   172.16.0.100

;; AUTHORITY SECTION:
magedu.site.        86400   IN  NS  ns1.magedu.site.

;; ADDITIONAL SECTION:
ns1.magedu.site.    86400   IN  A   192.168.37.7

;; Query time: 0 msec
;; SERVER: 172.16.0.7#53(172.16.0.7)
;; WHEN: Thu May 14 22:24:05 2020
;; MSG SIZE  rcvd: 83

[root@centos6 ~]$ dig www.magedu.site @10.10.10.7

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.magedu.site @10.10.10.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38730
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;www.magedu.site.       IN  A

;; ANSWER SECTION:
www.magedu.site.    86400   IN  A   8.8.8.8

;; AUTHORITY SECTION:
magedu.site.        86400   IN  NS  ns1.magedu.site.

;; ADDITIONAL SECTION:
ns1.magedu.site.    86400   IN  A   192.168.37.7

;; Query time: 1 msec
;; SERVER: 10.10.10.7#53(10.10.10.7)
;; WHEN: Thu May 14 22:24:58 2020
;; MSG SIZE  rcvd: 83

Q3、编译安装Mariadb，并启动后可以正常登录

1、编译前准备
[root@centos7-2 src]# mkdir /data/mysql
[root@centos7-2 src]# useradd -r -s /sbin/nologin -d /data/mysql mysql
[root@centos7-2 src]# chown mysql.mysql /data/mysql/
[root@centos7-2 src]# tar xf mariadb-10.2.25.tar.gz

2、安装依赖包
[root@centos7-2 src]# yum install bison bison-devel zlib-devel libcurl-devel libarchive-devel boost-devel gcc gcc-c++ cmake ncurses-devel gnutls-devel libxml2-devel openssl-devel libevent-devel libaio-devel libdb-cxx-devel -y

3、开始编译安装
[root@centos7-2 src]# cd mariadb-10.2.25/
[root@centos7-2 mariadb-10.2.25]# cmake . -DCMAKE_INSTALL_PREFIX=/apps/mysql \
-DMYSQL_DATADIR=/data/mysql/ \
-DSYSCONFDIR=/etc/ \
-DMYSQL_USER=mysql \
-DWITH_INNOBASE_STORAGE_ENGINE=1 \
-DWITH_ARCHIVE_STORAGE_ENGINE=1 \
-DWITH_BLACKHOLE_STORAGE_ENGINE=1 \
-DWITH_PARTITION_STORAGE_ENGINE=1 \
-DWITHOUT_MROONGA_STORAGE_ENGINE=1 \
-DWITH_DEBUG=0 \
-DWITH_READLINE=1 \
-DWITH_SSL=system \
-DWITH_ZLIB=system \
-DWITH_LIBWRAP=0 \
-DENABLED_LOCAL_INFILE=1 \
-DMYSQL_UNIX_ADDR=/data/mysql/mysql.sock \
-DDEFAULT_CHARSET=utf8mb4 \
-DDEFAULT_COLLATION=utf8_general_ci
[root@centos7-2 mariadb-10.2.25]# make && make install

4、初始化环境变量及数据库
[root@centos7-2 mariadb-10.2.25]# echo 'PATH=/apps/mysql/bin:$PATH' > /etc/profile.d/mysql.sh
[root@centos7-2 mariadb-10.2.25]# . /etc/profile.d/mysql.sh
[root@centos7-2 mariadb-10.2.25]# cd /apps/mysql/
[root@centos7-2 mysql]# cp /apps/mysql/support-files/my-huge.cnf /etc/my.cnf
[root@centos7-2 mysql]# cp /apps/mysql/support-files/mysql.server /etc/init.d/mysqld
[root@centos7-2 mysql]# vim /etc/my.cnf
[mysqld]
character_set_server=utf8mb4
...
[root@centos7-2 mysql]# scripts/mysql_install_db --datadir=/data/mysql/ --user=mysql

5、启动数据库
service mysqld start

6、进入数据库测试
[root@centos7-2 mysql]# mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 10
Server version: 10.2.25-MariaDB-log Source distribution

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| test               |
+--------------------+
4 rows in set (0.01 sec)

MariaDB [(none)]>

相关文章

  • 马哥Linux第十三周

    Q1、简述DNS服务器原理，并搭建主-辅服务器 客户端发起请求(www.test.com)到本地DNS服务器 本地...

  • 文件系统常用命令：cd命令

    为方便马哥学员的理解和使用，马哥linux运维团队特别做了《马哥Linux命令大全锦集》，命令是集合了马哥教育学员...

  • 马哥linux第二周

    Q1、描述Linux发行版的系统目录名称命名规则以及用途。 命名规则： 文件名最长255个字节 包括路径在内文件名...

  • 马哥Linux第五周

    Q1、查找/etc目录下大于1M且类型为普通文件的所有文件 Q2、打包/etc/目录下面所有conf结尾的文件，压...

  • 马哥Linux第七周

    Q1、简述osi七层模型和TCP/IP五层模型 OSI七层模型7、应用层网络进程访问应用层：为应用程序进程提供网络...

  • 马哥Linux第九周

    Q1、编写脚本，接受二个位置参数，magedu和/www，判断系统是否有magedu，如果没有则自动创建maged...

  • Linux开发被大数据云计算带火啦让我门一起学习Linux教程大

    视频下载地址 Linux运维 马哥教程Liunx新 马哥2016linux就业班+架构班+运维班全套新 dubbo...

  • 马哥Linux第十五周

    Q1、编写脚本，支持让用户自主选择，使用mysqldump还是xtraback全量备份。 Q2、配置Mysql主从...

  • 马哥Linux第十二周

    Q1、配置chrony服务，实现服务器时间自动同步 Q2、实现cobbler+pxe自动化装机 客户端测试： 新建...

  • 马哥Linux第十七周

    Q1、部署分离的LAMP，部署到二台服务器上，php加载xcache模块 环境：2台主机 server-A 192...

网友评论

      本文标题：马哥Linux第十三周

      本文链接：https://www.haomeiwen.com/subject/nodfohtx.html

      延伸阅读

      深度阅读

      • 您也可以注册成为美文阅读网的作者，发表您的原创作品、分享您的心情！

      栏目导航

      热点阅读

      关于我们|服务条款|联系我们|马哥Linux第十三周|投稿指南|网站地图|RSS订阅|排版工具|手机版

      提供经典美文摘抄,优美散文欣赏,现代诗歌精选,短篇小说,心情随笔,表白情书范文,故事会在线阅读欣赏

      Copyright © 2014-2023 Haomeiwen.com All Rights Reserved. 好美文阅读网 版权所有

      备案信息：桂公网安备 45052102000051号 · 桂ICP备13007215号-3

      本站所收录作品、热点评论等信息部分来源互联网，目的只是为了系统归纳学习和传递资讯

      所有作品版权归原创作者所有，与本站立场无关，如不慎侵犯了你的权益，请联系我们告知，我们将做删除处理！