Linux下的主辅DNS服务器同步

举报
江湖有缘 发表于 2023/01/16 13:41:55 2023/01/16
【摘要】 Linux下的主辅DNS服务器同步

一、系统环境介绍

系统:rhel8.0
control:192.168.200.150 -》主DNS(已配置)
node1:192.168.200.135 -》辅助DNS
node2:192.168.200.136

二、辅助DNS搭建

1.安装yum包

[root@node1 ~]# yum -y install bind bind-chroot
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
AppStream                                                                                                      165 kB/s | 3.2 kB     00:00    
BaseOS                                                                                                         155 kB/s | 2.7 kB     00:00    
ansiable                                                                                                       0.0  B/s |   0  B     00:00    
Zabbix                                                                                                         1.3 kB/s | 2.9 kB     00:02    
Failed to synchronize cache for repo 'ansiable', ignoring this repo.
Dependencies resolved.
===============================================================================================================================================
 Package                          Arch                        Version                                     Repository                      Size
===============================================================================================================================================
Installing:
 bind                             x86_64                      32:9.11.4-16.P2.el8                         AppStream                      2.1 M
 bind-chroot                      x86_64                      32:9.11.4-16.P2.el8                         AppStream                       99 k

Transaction Summary
===============================================================================================================================================
Install  2 Packages

Total size: 2.2 M
Installed size: 4.7 M
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                       1/1 
  Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Installing       : bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Installing       : bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
  Running scriptlet: bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
  Verifying        : bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Verifying        : bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
Installed products updated.

Installed:
  bind-32:9.11.4-16.P2.el8.x86_64                                    bind-chroot-32:9.11.4-16.P2.el8.x86_64                                   

Complete!

2.设置服务自启

[root@node1 ~]# systemctl enable --now named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.

3.编辑dns主配置文件

[root@node1 ~]# vim /etc/named.conf 

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };


4.编辑区域文件

[root@node1 ~]# vim /etc/named.rfc1912.zones
zone "huaxia.com" IN {
        type slave;
        masters { 192.168.200.150; };
        file "slaves/named.zx";
};



zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "200.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.200.150; };
        file "slaves/named.fx";
};

5.配置正向文件

[root@node1 named]# cp -p named.localhost slaves/named.zx
[root@node1 named]# cp -p named.loopback slaves/named.fx

$TTL 1D
@       IN SOA  ns.huaxia.com. root. (
                                        20212401        ; serial
                                        10      ; refresh
                                        1H      ; retry
                                        10      ; expire
                                        10 )    ; minimum
@       NS      ns.huaxia.com.
ns IN   A       192.168.200.150
server0  IN A 192.168.200.150
~                              

备注:,正向、反向数据库文件主辅同步时间频率改为 10 秒,增加序列号,为方便快速看到同步效果,并且重启 named 服务。(生产环境中保持默认即可。)

6.配置反向文件

$TTL 1D
@       IN SOA  ns.huaxia.com. root. (
                                        20212413       ; serial
                                        10      ; refresh
                                        10      ; retry
                                        1W      ; expire
                                        10 )    ; minimum
@       NS      ns.huaxia.com
ns IN   A       192.168.200.150
150     PTR     server0.example.com

7.重启服务和放行防火墙

[root@node1 named]# systemctl restart named
[root@node1 named]# firewall-cmd --permanent --add-service=dns
success
[root@node1 named]# firewall-cmd --reload 
success

三、客户端指向DNS服务器

[root@node2 ~]# vim /etc/resolv.conf 

# Generated by NetworkManager
search example.com ilt.example
nameserver 192.168.200.135

四、测试正向解析和反向解析

[root@node2 ~]# nslookup 
> server0.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	server0.huaxia.com
Address: 192.168.200.150
> 192.168.200.150
150.200.168.192.in-addr.arpa	name = www.huaxia.com.

六、测试主从同步

1.修改主DNS的正、反向配置文件

$TTL 1D
@       IN SOA   ns.huaxia.com. root.  (
                                   2021062211           ; serial
                                        10      ; refresh
                                        10      ; retry
                                        1W      ; expire
                                        30 )    ; minimum
@        IN      NS      ns.huaxia.com.
ns      IN      A       192.168.200.150
server0       IN      A       192.168.200.150
www IN A 192.168.200.150
web IN CNAME web.huaxia.com.
* IN A 192.168.200.150
mail IN A 192.168.200.150
@ MX 10 mail.huaxia.com.


$TTL 1D
@       IN SOA    ns  root.huaxia.com  (
                                   2021062211           ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum

@       IN     NS      ns.huaxia.com.
ns      IN      A       192.168.200.150
150           PTR      www.huaxia.com.
150     PTR   mail.huaxia.com.
150 PTR server0.example.com.

2.客户端检查是否dns同步

150.200.168.192.in-addr.arpa	name = server0.example.com.
150.200.168.192.in-addr.arpa	name = www.huaxia.com.
150.200.168.192.in-addr.arpa	name = mail.huaxia.com.

[root@node2 ~]# nslookup server0.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	server0.huaxia.com
Address: 192.168.200.150

[root@node2 ~]# nslookup www.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	www.huaxia.com
Address: 192.168.200.150


七、主DNS服务器搭建链接

Linux下的DNS服务器搭建

【版权声明】本文为华为云社区用户原创内容,转载时必须标注文章的来源(华为云社区)、文章链接、文章作者等基本信息, 否则作者和本社区有权追究责任。如果您发现本社区中有涉嫌抄袭的内容,欢迎发送邮件进行举报,并提供相关证据,一经查实,本社区将立刻删除涉嫌侵权内容,举报邮箱: cloudbbs@huaweicloud.com
  • 点赞
  • 收藏
  • 关注作者

评论(0

0/1000
抱歉,系统识别当前为高风险访问,暂不支持该操作

全部回复

上滑加载中

设置昵称

在此一键设置昵称,即可参与社区互动!

*长度不超过10个汉字或20个英文字符,设置后3个月内不可修改。

*长度不超过10个汉字或20个英文字符,设置后3个月内不可修改。