linux+bind9.4.1 配置主备dns同步

 

bind9.4.1下载地址:http://ftp.isc.org/isc/bind9/9.4.1/bind-9.4.1.tar.gz 

下载bind-9.4.1.tar.gz 放到/usr/local/src/目录下

# tar zxvf bind-9.4.1.tar.gz

# cd bind-9.4.1

# ./configure --prefix=/usr/local/named --enable-threads

# make

# make install

# cd /usr/local/named/etc

建立主dns IP:1.2.3.4 域名:ns1.XXX.com

# ../sbin/rndc-confgen

copy下面注释的部分代码,并去掉注释,修改rndc-key为ns1,有两处啊。。。再把代码加入named.conf

# key "rndc-key" {
#       algorithm hmac-md5;
#       secret "XXXXXXXXXXXXXXXXXXXXXXX";
# };
#
# controls {
#       inet 127.0.0.1 port 953
#               allow { 127.0.0.1; } keys { "rndc-key"; };
# };

 

建立named.conf

例子:

# vi named.conf

options {
        directory "/usr/local/named/etc/";
};

logging {
             category lame-servers { null; };
};

key "ns1" {
       algorithm hmac-md5;
       secret "XXXXXXXXXXXXXXXXXXXXXXX";
 };
 
controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "ns1"; };
 };
zone "." IN {
        type hint;
        file "named.ca";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};
zone "XXX.com" IN {
        type master;
        file "db.XXX.com";
};
zone "3.2.1.in-addr.arpa" IN {
        type master;
        file "named.rev";
};

生成named.ca文件

# dig > named.ca

named.ca例子:

;       This file holds the information on root name servers needed to
;       initialize cache of Internet domain name servers
;       (e.g. reference this file in the "cache  .  <file>"
;       configuration file of BIND domain name servers).
;
;       This file is made available by InterNIC registration services
;       under anonymous FTP as
;           file                /domain/named.root
;           on server           FTP.RS.INTERNIC.NET
;       -OR- under Gopher at    RS.INTERNIC.NET
;           under menu          InterNIC Registration Services (NSI)
;              submenu          InterNIC Registration Archives
;           file                named.root
;
;       last update:    Aug 22, 1997
;       related version of root zone:   1997082200
;
;
; formerly NS.INTERNIC.NET
;
.                        3600000  IN  NS    A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
;
; formerly NS1.ISI.EDU
;
.                        3600000      NS    B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET.      3600000      A     128.9.0.107
;
; formerly C.PSI.NET
;
.                        3600000      NS    C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET.      3600000      A     192.33.4.12
;
; formerly TERP.UMD.EDU
;
.                        3600000      NS    D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET.      3600000      A     128.8.10.90
;
; formerly NS.NASA.GOV
;
.                        3600000      NS    E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET.      3600000      A     192.203.230.10
;
; formerly NS.ISC.ORG
;
.                        3600000      NS    F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET.      3600000      A     192.5.5.241
;
; formerly NS.NIC.DDN.MIL
;
.                        3600000      NS    G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET.      3600000      A     192.112.36.4
;
; formerly AOS.ARL.ARMY.MIL
;
.                        3600000      NS    H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET.      3600000      A     128.63.2.53
;
; formerly NIC.NORDU.NET
;
.                        3600000      NS    I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET.      3600000      A     192.36.148.17
;
; temporarily housed at NSI (InterNIC)
;
.                        3600000      NS    J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET.      3600000      A     198.41.0.10
;
; housed in LINX, operated by RIPE NCC
;
.                        3600000      NS    K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET.      3600000      A     193.0.14.129
;
; temporarily housed at ISI (IANA)
;
.                        3600000      NS    L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET.      3600000      A     198.32.64.12
;
; housed in Japan, operated by WIDE
;
.                        3600000      NS    M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET.      3600000      A     202.12.27.33

# vi localhost.zone

$TTL    86400
$ORIGIN localhost.
@                       1D IN SOA       @ root (
                                        42              ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                        1D IN NS        @
                        1D IN A         127.0.0.1

# vi named.local

$TTL    86400
@       IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      localhost.

1       IN      PTR     localhost.

# vi db.XXX.com

$TTL    86400
@                       1D IN   SOA       XXX.com.       root.XXX.com. (
                                        2007070701
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                        IN NS   ns1.XXX.com.
                        IN NS   ns2.XXX.com.
                        IN      A       1.2.3.4
                     
ns1                     IN      A       1.2.3.4
ns2                     IN      A       5.6.7.8

# vi named.rev

$TTL    86400
@       IN      SOA     XXX.com. root.XXX.com.  (
                                      2 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
                IN      NS      ns1.XXX.com.
                IN      NS      ns2.XXX.com.
4.3.2.1.in-addr.arpa.               IN      PTR     ns1.XXX.com.
8.7.6.5.in-addr.arpa.               IN      PTR     ns2.XXX.com.

启动bind

# /usr/local/named/sbin/named -gc /usr/local/named/etc/named.conf

建立备dns IP:5.6.7.8 域名:ns2.XXX.com

# ../sbin/rndc-confgen

copy下面注释的部分代码,并去掉注释,修改rndc-key为ns2,有两处啊。。。再把代码加入named.conf

# key "rndc-key" {
#       algorithm hmac-md5;
#       secret "XXXXXXXXXXXXXXXXXXXXXXX";
# };
#
# controls {
#       inet 127.0.0.1 port 953
#               allow { 127.0.0.1; } keys { "rndc-key"; };
# };

 

建立named.conf

例子:

# vi named.conf

options {
        directory "/usr/local/named/etc/";
};

logging {
             category lame-servers { null; };
};

key "ns2" {
       algorithm hmac-md5;
       secret "XXXXXXXXXXXXXXXXXXXXXXX";
 };
 
controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "ns2"; };
 };
zone "." IN {
        type hint;
        file "named.ca";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};
zone "XXX.com" IN {
        type s;
        file "db.XXX.com";
        masters { 1.2.3.4; };
};
zone "3.2.1.in-addr.arpa" IN {
        type master;
        file "named.rev";
        masters {1.2.3.4; };
};

建立named.ca,localhost.zone,named.local文件,内容全部同主dns一样

# dig > named.ca

# vi localhost.zone   

# vi named.local

启动备dns,这时个从主dns自动同步主DNS的内容。自动在你定义的工作目录内生成数据文件

# /usr/local/named/sbin/named -gc /usr/local/named/etc/named.conf &

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值