实现DNS子域委派和转发

DNS子域委派

在父域下创建一个NS名为zhengzhou，地址为192.168.160.140

vim li.com.zone
zhengzhou NS    ns3
ns3    A 192.168.160.140

vim /etc/named.conf
        dnssec-enable no;
        dnssec-validation no;
#把这两项dns安全加密相关的关闭

然后依次配置区域文件和区域数据库

vim /etc/named.rfc1912.zones
zone "zhengzhou.li.com" IN {
        type master;
        file "zhengzhou.li.com.zone";
};

vim zhengzhou.li.com.zone
$TTL 1D
@       IN SOA  master.li.com admin.li.com (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
          NS    master
master A 192.168.160.140
www CNAME websrv
websrv A 5.5.5.5
                

修改配主置文件

vim /etc/named.conf
//      listen-on port 53 { 127.0.0.1; };
//      allow-query     { localhost; };
#把这两条注释掉

启动服务

systemctl start named

DNS服务器转发

实验环境

一台能连外网的服务器192.168.160.129
一台中间进行转发的服务器192.168.160.140
一台客户机192.168.160.128

192.168.160.129配置

yum install bind
vim /etc/named.conf
//      listen-on port 53 { 127.0.0.1; };
//      allow-query     { localhost; };
systemctl start named

192.168.160.140配置

yum install bind
vim /etc/named.conf
//      listen-on port 53 { 127.0.0.1; };
//      allow-query     { localhost; };
        forward only;                     	#仅执行转发，转发失败不会自己查找
        forwarders {192.168.160.129;};		#转发指向192.168.160.129
systemctl start named