第六单元 企业DNS服务搭建

dns服务器部署

1.关于dns的名词解释
dns:domain name service(域名解析服务)           

关于客户端:

/etc/resolv.conf       dns指向文件
nameserver 172.25.254.20
测试:
host www.baidu.com      地址解析命令
dig www.baidu.com        地址详细解析信息命令
A      记录ip地址叫做域名的Address 记录
SO    授权起始主机
dns顶级
. 13
次级
.com .net .edu .org ....
baidu.com
关于服务端
bind      安装包
named     服务名称
/etc/named.conf      主配置文件
/var/named         数据目录
端口                    53

DNS的开机及启用

实验环境：

服务端nodea，有网络.  客户端nodeb,无网络

 dnf install bind -y

[root@westoslinux ~]# systemctl enable --now named

[root@westoslinux ~]# firewall -cmd --permanent --add-service=dns

[root@westoslinux ~]# firewall-cmd --reload

关于报错信息

在客户端操作：

[root@westoslinux212 ~]# dig www.baidu.com

; <<>> DiG 9.11.13-RedHat-9.11.13-3.el8 <<>> www.baidu.com
;; global options: +cmd
;; connection timed out; no servers could be reached  

若出现no servers could be reached ，服务无法访问(服务开启?火墙?网络?端口?)

$TTL 1D
@       IN SOA  dns.westos.org. lee.westos.org. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns.westos.org
dns     A       127.0.0.1
200     PTR     mail.westos.org.
在服务端操作：

[root@westoslinux ~]# netstat -antlupe | grep 53
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      25         94195      29526/named         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      25         94202      29526/named         
tcp6       0      0 ::1:53                  :::*                    LISTEN      25         94197      29526/named         
tcp6       0      0 ::1:953                 :::*                    LISTEN      25         94203      29526/named         
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           70         25017      731/avahi-daemon: r
udp        0      0 127.0.0.1:53            0.0.0.0:*                           25         94193      29526/named         
udp6       0      0 :::5353                 :::*                                70         25018      731/avahi-daemon: r
udp6       0      0 ::1:53                  :::*                                25         94196      29526/named         
[root@westoslinux ~]# vim /etc/named.conf

 11         listen-on port 53 { any; };
[root@westoslinux ~]# systemctl restart named

[root@westoslinux212 ~]# dig www.baidu.com

; <<>> DiG 9.11.13-RedHat-9.11.13-3.el8 <<>> www.baidu.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 56262
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

若访问时出现REFUSED，服务拒绝访问

[root@westoslinux ~]# vim /etc/named.conf

19         allow-query     { any; };

 34         dnssec-validation no;-----------< 若访问时出现SERVFAIL，查询记录失败,(dns服务器无法到达上级,拒绝缓存

[root@westoslinux ~]# systemctl restart named

[root@westoslinux212 ~]# dig www.baidu.com

; <<>> DiG 9.11.13-RedHat-9.11.13-3.el8 <<>> www.baidu.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58415
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 5, ADDITIONAL: 6

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: d567cd895a3a1f984ee75d96618e5a246111e52dd4124339 (good)
;; QUESTION SECTION:
;www.baidu.com.            IN    A

若访问时发现NOERROR，表示查询成功

 

 高速缓存dns

在服务端操作：

[root@westoslinux ~]# vim /etc/named.conf

20          forwarders  { 114.114.114.114; };

 [root@westoslinux ~]# systemctl restart named

 [root@westoslinux ~]# dig www.baidu.com

 ;; Query time: 577 msec
;; SERVER: 172.25.254.112#53(172.25.254.112)
;; WHEN: Fri Nov 12 20:36:18 CST 2021
;; MSG SIZE  rcvd: 912

在客户端操作：

[root@westoslinux212 ~]# dig www.baidu.com

;; Query time: 2 msec
;; SERVER: 172.25.254.112#53(172.25.254.112)
;; WHEN: Fri Nov 12 20:36:25 CST 2021
;; MSG SIZE  rcvd: 912

 dns的正向解析

[root@westoslinux112 named]# cd
[root@westoslinux112 ~]# cd /var/named
[root@westoslinux112 named]# ls
data  dynamic  named.ca  named.empty  named.localhost  named.loopback  slaves
[root@westoslinux112 named]# ll
total 16
drwxrwx---. 2 named named   23 Nov 12 19:56 data
drwxrwx---. 2 named named   60 Nov 12 20:44 dynamic
-rw-r-----. 1 root  named 2253 Feb 27  2020 named.ca
-rw-r-----. 1 root  named  152 Feb 27  2020 named.empty
-rw-r-----. 1 root  named  152 Feb 27  2020 named.localhost
-rw-r-----. 1 root  named  168 Feb 27  2020 named.loopback
drwxrwx---. 2 named named    6 Feb 27  2020 slaves
[root@westoslinux112 named]# cp -p named.localhost westos.org.zone

[root@westoslinux112 named]# vim /etc/named.conf

[root@westoslinux112 named]#vim /etc/named.rfc1912.zones 

zone "westos.org" IN {
        type master;
        file "westos.org.zone";
        allow-update { none; };
};

[root@westoslinux112 named]#vim westos.org.zone$TTL 1D
@       IN SOA  dns.westos.org. lee.westos.org. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry