centos7 部署 DNS 主从

环境

名称	ip地址	cpu	内存
yz-dns-master	10.148.100.81	4c	8G
yz-dns-slave	10.148.100.82	4c	8G

yz-dns-master 主配置

#配置dns 监牢模式

yum install bind bind-chroot  -y

#主要文件说明

/var/named/chroot/etc/named.conf   #主配置文件

/var/named/chroot/var/named/       #区域数据库文件

#准备配置文件

cp -p  /etc/named.conf  /var/named/chroot/etc/

cp -p /var/named/named.*  /var/named/chroot/var/named/

#修改主配置文件,master 节点主动通知从节点要比从节点拉主节点配置文件要快，因此此处要配置 master 节点主动推配置文件至 从slave 节点。

vim /var/named/chroot/etc/named.conf

options {

        listen-on port 53 { 10.148.100.81; };

        directory       "/var/named";

        allow-query     { any; };

        recursion yes;

        pid-file "/run/named/named.pid";

        session-keyfile "/run/named/session.key";

        forwarders { 114.114.114.114; 219.141.140.10; };

};

//logging {

//        channel default_debug {

//               file "data/named.run";

//                severity dynamic;

//       };

//};

logging {

    channel query_log {

        file "query.log" versions 10 size 2G;

        severity info;

        print-time yes;

        print-severity yes;

        print-category yes;

    };

    category queries { query_log; };

};

zone "." IN {

        type hint;

        file "named.ca";

};

zone "moviebook.cn" IN {

        //hint master slave forward

        allow-update { none; };

        allow-transfer { 10.148.100.82; };

        also-notify { 10.148.100.82; };

        check-names ignore;

        type master;

        file "moviebook.cn.zone";

};

#修改本地解析文件

cat /etc/resolv.conf

nameserver 10.148.100.81

#增加区域数据库文件

cd  /var/named/chroot/var/named

cp -p named.localhost  moviebook.cn.zone

#修改区域数据库文件

vim /var/named/chroot/var/named/moviebook.cn.zone

$TTL 1D

moviebook.cn.   IN SOA  ns1.moviebook.cn. rname.invalid. (

                                        21      ; serial

                                        30      ; refresh

                                        20      ; retry

                                        1W      ; expire

                                        300 )   ; minimum

        NS      ns1.moviebook.cn.

;A

;PTR

;MX

;CNAME

ns1             A       10.148.100.88

test-yingpu     A       10.148.100.88

sport           A       10.148.100.89

news            CNAME   test-yingpu

www             A       122.14.233.94

mytest01        A       10.148.100.99

#检测

named-checkconf  /var/named/chroot/etc/named.conf

named-checkzone moviebook.cn /var/named/chroot/var/named/moviebook.cn.zone

#启动

systemctl  start  named-chroot

systemctl  enable  named-chroot

#检测 udp

netstat  -anput  |grep  53  

#测试

dig

host

nslookup

yz-dns-slave 从配置

#注意

主配置文件不会同步

同步的是区域数据库文件

#配置dns 监牢模式

yum install bind bind-chroot  -y

#从named.conf 主配置文件修改，注意查看文件权限

vim /var/named/chroot/etc/named.conf 

options {

        listen-on port 53 { 10.148.100.82; };

        directory       "/var/named";

        allow-query     { any; };

        recursion yes;

        pid-file "/run/named/named.pid";

        session-keyfile "/run/named/session.key";

        masterfile-format text;

        forwarders { 114.114.114.114; 219.141.140.10; };

};

//logging {

//        channel default_debug {

//               file "data/named.run";

//                severity dynamic;

//       };

//};

logging {

    channel query_log {

        file "query.log" versions 10 size 2G;

        severity info;

        print-time yes;

        print-severity yes;

        print-category yes;

    };

    category queries { query_log; };

};

zone "." IN {

        type hint;

        file "named.ca";

};

zone "moviebook.cn" IN {

        //hint master slave forward

        type slave;

        file "moviebook.cn.zone";

        masters { 10.148.100.81; };

        check-names ignore;

};

#修改本地解析文件

cat /etc/resolv.conf

nameserver 10.148.100.82

#检测

named-checkconf  /var/named/chroot/etc/named.conf

named-checkzone moviebook.cn /var/named/chroot/var/named/moviebook.cn.zone

#启动

systemctl  start  named-chroot

systemctl  enable  named-chroot

#检测 udp

netstat  -anput  |grep  53  

#查看数据库配置文件均从master 节点同步至从节点

#cd  /var/named/chroot/var/named

# ll

drwxr-x--- 7 root  named   4096 Mar 20 06:32 chroot

drwxrwx--- 2 named named   4096 Feb 24 01:17 data

drwxrwx--- 2 named named   4096 Feb 24 01:17 dynamic

drwxr-xr-x 2 root  root    4096 Mar 21 14:58 logs

-rw-r--r-- 1 named named    479 Mar 22 11:28 moviebook.cn.zone

-rw-r----- 1 root  named   2253 Apr  5  2018 named.ca

-rw-r----- 1 root  named    152 Dec 15  2009 named.empty

-rw-r----- 1 root  named    152 Jun 21  2007 named.localhost

-rw-r----- 1 root  named    168 Dec 15  2009 named.loopback

-rw-r--r-- 1 named named 362555 Mar 22 11:31 query.log

drwxrwx--- 2 named named   4096 Feb 24 01:17 slaves

#测试

dig

host

nslookup

主从测试

#登录主节点，修改  配置文件新增加A记录 desktop A  122.14.233.93

vim  /var/named/chroot/var/named/moviebook.cn.zone

#加载配置文件，使其生效

# rndc reload

server reload successful

#查看从节点

A记录已同步完成，序列号也同步完成

#测试解析

# nslookup   desktop.moviebook.cn

Server:         10.148.100.82

Address:        10.148.100.82#53

Name:   desktop.moviebook.cn

Address: 122.14.233.93

#查看均已解析成功。

巴特西

centos7 部署 DNS 主从

centos7 部署 DNS 主从

最新文章

热门文章