配置DNS服务器样例虚拟机,DNS主从服务器配置实战解析及案例

DNS主服务器:192.168.88.131

从服务器：192.168.88.130

总结：

主从复制(注意点)：

1、应该为一台独立的名称服务器；

2、主服务器的区域解析库文件中必须有一条NS记录是指向从服务器；

3、从服务器只需定义区域，而无需提供解析库文件；解析库文件应该放置于/var/named/slaves/目录中

4、主服务器得允许从服务器作区域传送

5、主从服务器时间应该同步，可通过ntp进行，

6、bind程序的版本应该保持一致，否则，应该从高，主低

一、从服务器配置(192.168.88.130)

从服务器只需定义区域，而无需提供解析库文件；

主从启动后，解析库文件会自动传送并放置于/var/named/slaves/目录中

定义从区域的方法：

zone "ZONE_NAME" IN {

type slave;

masters { MASTER_IP; }

file "slaves/ZONE_NAME.zone";

}

[root@www

~]# ps aux | grep named

named

9199

0.0 2.6

312424 13104 ?

Ssl

01:13 0:00

/usr/sbin/named -u named

root

9232

0.0 0.7

143964 3488

pts/1

S+

01:14 0:00

vim /etc/named.rfc1912.zones

root

9319

0.0 0.1

103268 864

pts/0

S+

01:17 0:00

grep named

[root@www

~]# ll -d /var/named/

drwxr-x---. 5 root named 4096 11月 17

22:16 /var/named/

[root@www

~]# ll /var/named/

总用量

28

drwxrwx---. 2 named named 4096 11月 18

01:13 data

drwxrwx---. 2 named named 4096 11月 18

01:13 dynamic

-rw-r-----. 1 root named 3289

4月11 2017

named.ca

-rw-r-----. 1 root named 152

12月 15 2009 named.empty

-rw-r-----. 1 root named 152

6月21 2007

named.localhost

-rw-r-----. 1 root named 168

12月 15 2009 named.loopback

drwxrwx---. 2 named named 4096 7月5

17:55 slaves

[root@www

named]# vim /etc/named.conf

//

options

{

listen-on port 53 { 192.168.88.130; 127.0.0.1; };

//

listen-on-v6 port 53 { ::1; };

directory

"/var/named";

dump-file

"/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file

"/var/named/data/named_mem_stats.txt";

allow-query

{ any; };

recursion yes;

//

dnssec-enable yes;

//

dnssec-validation yes;

bindkeys-file "/etc/named.iscdlv.key";

//

managed-keys-directory "/var/named/dynamic";

};

logging

{

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

zone "."

IN {

type hint;

file "named.ca";

};

include

"/etc/named.rfc1912.zones";

include

"/etc/named.root.key";

[root@www

slaves]#

vim /etc/named.rfc1912.zones

…….

zone

"localhost" IN {

type master;

file "named.localhost";

allow-update { none; };

};

zone

"1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa"

IN {

type master;

file "named.loopback";

allow-update { none; };

};

zone

"1.0.0.127.in-addr.arpa" IN {

type master;

file "named.loopback";

allow-update { none; };

};

zone

"0.in-addr.arpa" IN {

type master;

file "named.empty";

allow-update { none; };

};

//定义正解从区域

zone "field.com" IN {

type slave;

masters { 192.168.88.131; };

file "slaves/field.com.zone";

};

//定义反解从区域

zone "88.168.192.in-addr.arpa" IN {

type slave;

masters { 192.168.88.131; };

file "slaves/192.168.88.zone";

[root@www slaves]# named-checkconf

//查看主配置文件是否有语法错误

[root@www

named]# cd /var/named/slaves/

[root@www

slaves]# service named restart

停止

named：.[确定]

启动

named：[确定]

二、主服务器上配置(192.168.88.131)：

注意：主服务器的区域解析库文件中必须有一条NS记录是指向从服务器；

[root@www

named]# ls

192.168.88.zone data

field.com.zone

named.empty

named.loopback

chroot

dynamic

named.ca

named.localhost slaves

[root@www

named]# vim /etc/named.rfc1912.zones

file "named.localhost";

allow-update { none; };

};

zone

"localhost" IN {

type master;

file "named.localhost";

allow-update { none; };

};

zone

"1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa"

IN {

type master;

file "named.loopback";

allow-update { none; };

};

zone

"1.0.0.127.in-addr.arpa" IN {

type master;

file "named.loopback";

allow-update { none; };

};

zone

"0.in-addr.arpa" IN {

type master;

file "named.empty";

allow-update { none; };

};

zone "field.com" IN {

type master;

file "field.com.zone";

};

zone "88.168.192.in-addr.arpa" IN {

type master;

file "192.168.88.zone";

};

(1)、定义正解区域解析库文件：

主服务器的区域解析库文件中必须有一条NS记录是指向从服务器

[root@www named]# vim field.com.zone

$TTL 86400

$ORIGIN field.com.

@

I