美文网首页部署运维运维部署
Centos 7 安装配置DNS主从服务

Centos 7 安装配置DNS主从服务

作者: baiyongjie | 来源:发表于2018-11-04 00:20 被阅读69次

    实验环境

    • 系统: CentOS Linux release 7.4.1708 (Core)
    • 主服务器: 192.168.1.54
    • 从服务器: 192.168.1.89
    • 测试服务器: 192.168.1.49

    安装dns服务

    #两台服务器时间要保持一致
[root@private home]# /usr/sbin/ntpdate cn.pool.ntp.org
 3 Nov 13:39:25 ntpdate[30164]: step time server 119.28.183.184 offset 1.287519 sec

#安装服务
[root@private home]# yum install -y bind bind-utils

#设置防火墙
[root@private home]# iptables -I INPUT -p udp --dport 53 -j ACCEPT

[root@private home]# iptables -nL
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0            udp dpt:53

    配置服务

    主服务器
    #修改/etc/named.conf文件
[root@kvm000 ~]# vim /etc/named.conf
options {
        listen-on port 53 { 192.168.1.54; }; #监听本机IP
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { 192.168.1.0/24;192.168.9.0/24;192.168.88.0/24 }; #允许解析请求的地址
        recursion yes; #开启递归查询
        dnssec-enable no;  #关闭DNS安全扩展功能
        dnssec-validation no;  #关闭DNS安全验证
        bindkeys-file "/etc/named.iscdlv.key";
        managed-keys-directory "/var/named/dynamic";
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

{
    ...
    ...
}


#修改/etc/named.rfc1912.zones
[root@kvm000 ~]# vim /etc/named.rfc1912.zones
zone "windns.com." IN {    #创建正向解析域
        type master;
        file "windns.com.zone";
        allow-update { none; };
        allow-transfer { 192.168.1.89; };  #允许同步DNS的辅助服务器IP；
        notify yes;  #启用变更通告，当主服务器DNS区域文件发生变更后，通知从服务器进行比较同步；
};
zone "1.168.192.in-addr.arpa" IN {  #创建反解析域
        type master;
        file "192.168.1.zone";
        allow-update { none; };
        allow-transfer { 192.168.1.89;};
        notify yes;
};


#新建windns.com.zone正向解析文件
[root@kvm000 ~]# vim /var/named/windns.com.zone
$TTL 3600
$ORIGIN windns.com.
@       IN      SOA   windns.com. admin.windns.com. (
        2018042101
        1D
        1H
        1W
        3H
)
@       IN      NS      ns1.windns.com.
@       IN      NS      ns2.windns.com.
ns1     IN      A       192.168.1.54
ns2     IN      A       192.168.1.89
www     IN      A       192.168.1.92
web     IN      CNAME   www

#新建/var/named/192.168.1.zone反向解析文件
[root@kvm000 ~]# vim /var/named/192.168.1.zone
$TTL 3600
$ORIGIN  1.168.192.in-addr.arpa.
@       IN      SOA  windns.com. admin.windns.com. (
        2018042101
        1D
        1H
        1W
        3H
)
@       IN      NS      ns1.windns.com.
@       IN      NS      ns2.windns.com.
54      IN      PTR     ns1.windns.com.
89      IN      PTR     ns2.windns.com.
92      IN      PTR     www.windns.com.

#检查配置文件
[root@kvm000 named]#  named-checkzone windns.com windns.com.zone                                                  
zone windns.com/IN: loaded serial 2018042101
OK

[root@kvm000 named]#  named-checkzone 1.168.192.in-addr.arpa 192.168.1.zone  
zone 1.168.192.in-addr.arpa/IN: loaded serial 2018042101
OK

#如没问题则启动服务
[root@kvm000 named]# systemctl start named
[root@kvm000 named]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; disabled; vendor preset: disabled)
   Active: active (running) since Sat 2018-11-03 23:19:53 CST; 18min ago
  Process: 12264 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 12260 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 12265 (named)
    Tasks: 11
   Memory: 63.0M
   CGroup: /system.slice/named.service
           └─12265 /usr/sbin/named -u named -c /etc/named.conf

Nov 03 23:19:53 kvm000 named[12265]: zone windns.com/IN: loaded serial 2018042101
Nov 03 23:19:53 kvm000 named[12265]: zone localhost.localdomain/IN: loaded serial 0
Nov 03 23:19:53 kvm000 named[12265]: all zones loaded
Nov 03 23:19:53 kvm000 named[12265]: running
Nov 03 23:19:53 kvm000 named[12265]: zone windns.com/IN: sending notifies (serial 2018042101)
Nov 03 23:19:53 kvm000 named[12265]: zone 1.168.192.in-addr.arpa/IN: sending notifies (serial 2018042101)
Nov 03 23:19:53 kvm000 systemd[1]: Started Berkeley Internet Name Domain (DNS).
Nov 03 23:37:18 kvm000 named[12265]: client 192.168.1.89#55021 (windns.com): transfer of 'windns.com/IN': AXFR started
Nov 03 23:37:18 kvm000 named[12265]: client 192.168.1.89#55021 (windns.com): transfer of 'windns.com/IN': AXFR ended
Nov 03 23:37:18 kvm000 named[12265]: client 192.168.1.89#1911: received notify for zone 'windns.com'
    从服务器配置
    options {
        listen-on port 53 { 192.168.1.89; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { 192.168.1.0/24;192.168.9.0/24;192.168.88.0/24; };
        recursion yes;
        dnssec-enable no;
        dnssec-validation no;
        bindkeys-file "/etc/named.iscdlv.key";
        managed-keys-directory "/var/named/dynamic";
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

{
    ...
    ...
}

#修改/etc/named.rfc1912.zones
vim 
zone "windns.com" IN {
        type slave;    #指定类型为slave ；
        file "slaves/windns.com.zone";  #指定同步文件的存放路径及名称；
        masters { 192.168.1.54; };  #指定主服务器的IP;
        masterfile-format text;  #指定区域文件的格式为text，不指定有可能会为乱码（没错，这坑我又踩过）；
};
zone "1.168.192.in-addr.arpa" IN {
        type slave;
        file "slaves/192.168.1.zone";
        masters { 192.168.1.54; };
        masterfile-format text;
};

#检查配置文件是否正确
[root@private home]# named-checkconf /etc/named.conf

#如没问题则启动服务
[root@private home]# systemctl start named
[root@private home]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; disabled; vendor preset: disabled)
   Active: active (running) since 六 2018-11-03 23:37:18 CST; 5s ago
  Process: 16589 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 16586 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 16591 (named)
    Tasks: 9
   Memory: 59.9M
   CGroup: /system.slice/named.service
           └─16591 /usr/sbin/named -u named -c /etc/named.conf

11月 03 23:37:18 private.winchannel.net named[16591]: zone localhost.localdomain/IN: loaded serial 0
11月 03 23:37:18 private.winchannel.net named[16591]: zone localhost/IN: loaded serial 0
11月 03 23:37:18 private.winchannel.net named[16591]: all zones loaded
11月 03 23:37:18 private.winchannel.net named[16591]: running
11月 03 23:37:18 private.winchannel.net systemd[1]: Started Berkeley Internet Name Domain (DNS).
11月 03 23:37:18 private.winchannel.net named[16591]: zone windns.com/IN: Transfer started.
11月 03 23:37:18 private.winchannel.net named[16591]: transfer of 'windns.com/IN' from 192.168.1.54...021
11月 03 23:37:18 private.winchannel.net named[16591]: zone windns.com/IN: transferred serial 2018042101
11月 03 23:37:18 private.winchannel.net named[16591]: transfer of 'windns.com/IN' from 192.168.1.54...ec)
11月 03 23:37:18 private.winchannel.net named[16591]: zone windns.com/IN: sending notifies (serial ...01)

    测试dns服务

    修改dns地址
    [root@sftp-server ~]# vim /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.168.1.54
nameserver 192.168.1.89
    ping测试
    # 返回结果是 192.168.1.92 , dns生效
[root@sftp-server ~]# ping www.windns.com
PING www.windns.com (192.168.1.92) 56(84) bytes of data.
64 bytes from www.windns.com (192.168.1.92): icmp_seq=1 ttl=64 time=0.100 ms
64 bytes from www.windns.com (192.168.1.92): icmp_seq=2 ttl=64 time=0.168 ms
64 bytes from www.windns.com (192.168.1.92): icmp_seq=3 ttl=64 time=0.144 ms
    nslookup测试
    [root@sftp-server ~]# nslookup 
> www.windns.com #域名测试解析结果
Server:         192.168.1.54
Address:        192.168.1.54#53

Name:   www.windns.com
Address: 192.168.1.92

> 192.168.1.92 #IP测试解析域名
Server:         192.168.1.54
Address:        192.168.1.54#53

92.1.168.192.in-addr.arpa       name = www.windns.com.
    dig测试
    # 正向测试 A记录
[root@sftp-server ~]# dig  www.windns.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.1 <<>> www.windns.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31367
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.windns.com.                        IN      A

;; ANSWER SECTION:
www.windns.com.         3600    IN      A       192.168.1.92

;; AUTHORITY SECTION:
windns.com.             3600    IN      NS      ns2.windns.com.
windns.com.             3600    IN      NS      ns1.windns.com.

;; ADDITIONAL SECTION:
ns1.windns.com.         3600    IN      A       192.168.1.54
ns2.windns.com.         3600    IN      A       192.168.1.89

;; Query time: 0 msec
;; SERVER: 192.168.1.54#53(192.168.1.54)
;; WHEN: Sat Nov  3 23:58:29 2018
;; MSG SIZE  rcvd: 116

# 反向测试
[root@sftp-server ~]# dig  192.168.1.92

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.1 <<>> 192.168.1.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49348
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;192.168.1.92.                  IN      A

;; AUTHORITY SECTION:
.                       10800   IN      SOA     a.root-servers.net. nstld.verisign-grs.com. 2018110300 1800 900 604800 86400

;; Query time: 263 msec
;; SERVER: 192.168.1.54#53(192.168.1.54)
;; WHEN: Sat Nov  3 23:58:50 2018
;; MSG SIZE  rcvd: 105
    停主dns测试
    #可以看到 解析的由1.54变成了1.89 测试生效~
[root@sftp-server ~]# nslookup 
> www.windns.com
Server:         192.168.1.89
Address:        192.168.1.89#53

Name:   www.windns.com
Address: 192.168.1.92

> 192.168.1.92
Server:         192.168.1.89
Address:        192.168.1.89#53

92.1.168.192.in-addr.arpa       name = www.windns.com.
    88网段测试
    #修改网卡dns
C:\Users\baiyongjie>ipconfig /all
以太网适配器 以太网:

   连接特定的 DNS 后缀 . . . . . . . :
   描述. . . . . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   物理地址. . . . . . . . . . . . . : F4-8E-38-7E-D7-0B
   DHCP 已启用 . . . . . . . . . . . : 否
   自动配置已启用. . . . . . . . . . : 是
   本地链接 IPv6 地址. . . . . . . . : fe80::6d84:a277:46d:2c7a%12(首选)
   IPv4 地址 . . . . . . . . . . . . : 192.168.88.37(首选)
   子网掩码  . . . . . . . . . . . . : 255.255.255.0
   默认网关. . . . . . . . . . . . . : 192.168.88.1
   DHCPv6 IAID . . . . . . . . . . . : 49581624
   DHCPv6 客户端 DUID  . . . . . . . : 00-01-00-01-23-0B-F2-AA-F4-8E-38-7E-D7-0B
   DNS 服务器  . . . . . . . . . . . : 192.168.1.54
                                       8.8.8.8
   TCPIP 上的 NetBIOS  . . . . . . . : 已启用
   
#ping 测试
C:\Users\baiyongjie>ping  www.windns.com

正在 Ping www.windns.com [192.168.1.92] 具有 32 字节的数据:
来自 192.168.1.92 的回复: 字节=32 时间<1ms TTL=63
来自 192.168.1.92 的回复: 字节=32 时间<1ms TTL=63
来自 192.168.1.92 的回复: 字节=32 时间<1ms TTL=63
来自 192.168.1.92 的回复: 字节=32 时间<1ms TTL=63

    相关文章

      网友评论

        本文标题：Centos 7 安装配置DNS主从服务

        本文链接：https://www.haomeiwen.com/subject/vanlxqtx.html

        延伸阅读

        深度阅读

        • 您也可以注册成为美文阅读网的作者，发表您的原创作品、分享您的心情！

        栏目导航

        热点阅读

        部署运维

        运维部署

        关于我们|服务条款|联系我们|Centos 7 安装配置DNS主从服务|投稿指南|网站地图|RSS订阅|排版工具|手机版

        提供经典美文摘抄,优美散文欣赏,现代诗歌精选,短篇小说,心情随笔,表白情书范文,故事会在线阅读欣赏

        Copyright © 2014-2023 Haomeiwen.com All Rights Reserved. 好美文阅读网 版权所有

        备案信息：桂公网安备 45052102000051号 · 桂ICP备13007215号-3

        本站所收录作品、热点评论等信息部分来源互联网，目的只是为了系统归纳学习和传递资讯

        所有作品版权归原创作者所有，与本站立场无关，如不慎侵犯了你的权益，请联系我们告知，我们将做删除处理！