linux系统部署高速缓存服务端||部署dns解析

                                高速缓存

服务端:

1.配置yum源:vim  /etc/yum.repos.d/rhel_dvd.repo

http://172.25.254.71/rhel7       更改yum源地址


2.yum clean all           清空缓存

3.yum repolist            列出可下载软件

4.yum install bind -y     安装bind软件


5.systemctl start named   打开服务(注意:打开服务时加密字符不够按键盘或动鼠标)

6.cat  /dev/random         查看加密字符

7.netstat -atnlupe | grep named             查看named服务的53端口状态

    

8.rpm -qc bind             查看bind软件配置文件


9.vim  /etc/named.conf     编辑配置文件

内容:

options {

        listen-on port 53 { any; };   打开服务端网络接口的所53端口

        listen-on-v6 port 53 { ::1; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     {any; };   打开所有人的访问权限

         forwarders { 172.25.254.250; };   服务端不知道,访问的ip

10.systemctl restart named      重启服务

客户端:

1. vim /etc/resolv.conf              编辑配置文件

内容:

# Generated by NetworkManager

domain example.com

search example.com ilt.example.com

nameserver 172.25.254.171       访问的主机ip

2. dig www.baudu.com   询问dns域名服务器,并把缓存保存在高速缓存中

注意访问时:

       

       REFUSED    表示访问被拒绝

       NOERROR    表示访问成功

       dig www.baudu.com   服务没开

; <<>> DiG 9.9.4-RedHat-9.9.4-14.el7 <<>> www.baudu.com

;; global options: +cmd

;; connection timed out; no servers could be reached


dns解析

一.dns本地正向解析

 1.修改dns解析地址 vim   /etc/resolv.conf

# Generated by NetworkManager

search ilt.example.com

nameserver  172.25.254.171

2.vim /etc/named.conf    编辑配置文件

内容:

options {

        listen-on port 53 { any; };

        listen-on-v6 port 53 { ::1; };

        directory       "/var/named";

        dump-file       "/var/named/data/cache_dump.db";

        statistics-file "/var/named/data/named_stats.txt";

        memstatistics-file "/var/named/data/named_mem_stats.txt";

        allow-query     {any; };

3.vim /etc/named.rfc1912.zones    编辑配置文件

内容:

zone "westos.com" IN {            域名

        type master;

        file "westos.com.zone";   问题答案

        allow-update { none; };


4. rpm -ql bind     查找配置文件

/etc/NetworkManager/dispatcher.d/13-named

/etc/logrotate.d/named

/etc/named

/etc/named.conf

/etc/named.iscdlv.key

/etc/named.rfc1912.zones

/etc/named.root.key

/var/named/named.localhost         本地解析配置文件模板

5. cd /var/named/                                               进入目录ls

6. cp -p named.localhost    westos.com.zone    复制配置文件

7.vim westos.com.zone                                        编辑配置文件


内容:

$TTL 1D

@       IN SOA  @ root.westos.com. (

                                        0       ; serial

                                        1D      ; refresh

                                        1H      ; retry

                                        1W      ; expire

                                        3H )    ; minimum

          NS      dns.westos.com.

dns       A       172.25.254.171

www     A       172.25.254.202

hello     A       172.25.254.203

8.systemctl restart named      重启服务


本机测试:dig      hello.westos.com


二.dns本地反向解析:

1.修改dns解析地址:vim   /etc/resolv.conf


2.vim /etc/named.rfc1912.zones      编辑配置文件

内容:

zone "254.25.172.in-addr.arpa" IN {

        type master;

        file "westos.com.ptr";

        allow-update { none; };


3. cp -p named.loopback westos.com.ptr  复制配置文件

4. vim westos.com.ptr                                 编辑配置文件

内容:

$TTL 1D

@       IN SOA  @   root.westos.com. (

                                        0       ; serial

                                        1D      ; refresh

                                        1H      ; retry

                                        1W      ; expire

                                        3H )    ; minimum

        NS      dns.westos.com.

dns     A       172.25.254.200

110     PTR     yun.westos.com.

112     PTR    hello.westos.com.

5.systemctl   restart   named        重启服务

本机测试:dig  -x  172.25.254.110

注意:本地(正向/反向)解析时,若named配置文件找不到该域名/IP地址,会访问失败

三.dns轮询

1.在/var/named目录下

修改配置文件:   vim    westos.com.zone   
$TTL 1D
@       IN SOA  @ root.westos.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns.westos.com.
dns     A       172.25.254.108
hello   CNAME   www
www     A       172.25.254.111
www     A       172.25.254.122

2.systemctl   restart   named        重启服务

3.本地解析时,域名解析出现轮询式

本地测试:dig  hello.westos.com


四.dns集群(辅助主机解析)

1.辅助主机配置yum源,安装bind,打开named服务

2.辅助主机修改DNS配置文件: vim   /etc/resolv.conf    
# Generated by NetworkManager
search example.com
nameserver  172.25.254.171

3.辅助主机修改配置文件:vim    /etc/named.rfc1912.zones

zone "westos.com" IN {

        type slave;

        masters {172.25.254.171;};

        file "slaves/westos.com.zone";

        allow-update { none; };

};

4.systemctl   restart   named        重启服务

5.本地主机修改配置文件:vim    /etc/named.rfc1912.zones

zone "westos.com" IN {
        type master;
        file "westos.com.zone";
        allow-update { none; };
        allow-transfer {172.25.254.171;};         允许171主机同步
        also-notify {172.25.254.171;};              当文件变更时,通知171主机
};

6..本地主机修改文件:vim  westos.com.zone

$TTL 1D

@       IN SOA  @ root.westos.com. (

                                        050201  ; serial          最后一次修改时间

                                        1D      ; refresh

                                        1H      ; retry

                                        1W      ; expire

                                        3H )    ; minimum

        NS      dns.westos.com.

dns     A       172.25.254.171

hello   CNAME   www

www     A       172.25.254.101

www     A       172.25.254.102

7.systemctl  restart  named                重启服务

8.测试:本地主机:dig  hello.westos.com

五.dns双向解析(114主机)

1.cd /var/named/                                                进入目录

2.cp -p westos.com.zone westos.com.inter    复制配置文

3.vim westos.com.inter

内容:

$TTL 1D

@       IN SOA  dns.westos.com. root.westos.com. (

                                        2018042603      ; serial

                                        1D      ; refresh

                                        1H      ; retry

                                        1W      ; expire

                                        3H )    ; minimum

        NS      dns.westos.com.

dns     A       192.168.0.207

hello   CNAME   www

www     A       192.168.0.207

dong    A       192.168.0.203

4.cp -p /etc/named.rfc1912.zones  /etc/named.rfc1912.inter  

5.vim /etc/named.rfc1912.inter      编辑配置文件

内容:

zone "westos.com" IN {                       维护的域

        type master;

        file "westos.com.inter";               访问的文件

        allow-update { none; };

};


6.vim  /etc/named.conf    编辑配置文件

内容:

注释:

/*

zone "." IN {

        type hint;

        file "named.ca";

};

include "/etc/named.rfc1912.zones";

include "/etc/named.root.key";

*/

添加:

view      localnet  {

      match-clients { 172.25.254.114; };     114主机访问named.rfc1912.zones文件

       zone "." IN {

       type hint;

       file "named.ca";

       };  

       include "/etc/named.rfc1912.zones";

    };

view      Anynet  {

      match-clients { any; };                其他人访问named.rfc1912.inter文件

       zone "." IN {

       type hint;

       file "named.ca";

       };  

       include "/etc/named.rfc1912.inter";

    };


7.systemctl restart named                重启服务

8.测试(107):dig  dong.westos.com      看到的是172.25.254.网段

切换另一台主机(214):vim /etc/resolv.conf    更改dns解析地址

9.systemctl  restart   named                                重启服务

内容:

# Generated by NetworkManager

search example.com

nameserver 172.25.254.114

测试:dig  dong.westos.com         看到的是192.268.0网段


六.远程更新dns解析

1. vim /etc/resolv.conf
内容:
# Generated by NetworkManager
search example.com
nameserver 172.25.254.207


2.vim /etc/named.conf
内容:
注释:
/*
view      localnet  {
      match-clients { 172.25.254.207; };
       zone "." IN {
       type hint;
       file "named.ca";
       };  
       include "/etc/named.rfc1912.zones";
     };

view      Anynet  {
      match-clients { any; };
       zone "." IN {
       type hint;
       file "named.ca";
       };  
       include "/etc/named.rfc1912.inter";
     };
*/


打开:
zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";


3.systemctl restart named               重启服务


4.vim /etc/named.rfc1912.zones     编辑文件
内容:
zone "westos.com" IN {
        type master;
        file "westos.com.zone";
        allow-update { 172.25.254.107; };     允许谁更新我的
        allow-transfer { 172.25.254.107; };
        also-notify { 172.25.254.107; };

};


5.systemctl restart named         重启服务


6.cp -p westos.com.zone   /mnt/     把文件备份到/mnt/


7.ls -ld /var/named/                           查看目录权限
8.chmod g+w /var/named/               改变目录权限


9.[root@localhost named]# setenforce 0     selinux改成警告



测试(107):
10.[root@localhost named]# nsupdate
> server 172.25.254.207
> update delete www.westos.com       删除www.westos.com
> send                  发送


11.[root@localhost named]# nsupdate
> server 172.25.254.207
> update add dong.westos.com 86400 A 172.25.254.107    添加dong.westos.com(86400表示86400秒是一天)                           
> send                   发送


查看(207):
[root@localhost named]# ls
data      named.empty      slaves            westos.com.zone
dynamic   named.localhost  westos.com.inter  westos.com.zone.jnl
named.ca  named.loopback   westos.com.ptr
查看有westos.com.zone.jnl文件


恢复文件:
1.rm - fr westos.com.zone.jnl          删除文件
2.cp -p /mnt/westos.com.zone .      把/mnt/文件复制回来
3.systemctl restart named               重启服务




评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值