基于lnternet网络的DNS服务搭建

一，Internet网络的DNS解析

www.lmy.com web服务器 192.1.1.17
lmy.com 主DNS服务器 192.1.1.27  从DNS服务器 192.1.1.37
com DNS服务器192.1.1.47
根 DNS服务器192.1.1.57
只缓存服务器 192.1.1.77
forward DNS服务器 192.1.1.67

1,准备终端PC和www.lmy.com
###在 192.1.1.17 上
~]# yum install -y httpd
~]# echo www.lmy.com > /var/www/html/index.html
~]# systemctl start httpd

###在 192.1.1.7 上 
[root@pc ~]# curl 192.1.1.17
www.lmy.com


2,配置DNS主服务器
###在192.1.1.27上面配置

~]# yum install bind -y
~]# vim /etc/named.conf
options {
        listen-on port 53 { localhost; };
        allow-query     { any; };

named]# cp named.localhost lmy.com.zone -p
named]# vim lmy.com.zone
$TTL 1D
@       IN SOA  ns1 admin  (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns1
ns1     A       192.1.1.27
www     A       192.1.1.17

named]# vim /etc/named.rfc1912.zones
zone "lmy.com" {
        type master;
        file "lmy.com.zone";
};

3,配置反向区域服务器
###在 192.1.1.27上面配置
named]# vim /etc/named.rfc1912.zones
zone "1.1.192.in-addr.arpa"{
        type master;
        file "192.1.1.zone";
};

named]# vim 192.1.1.zone
$TTL 1D
@       IN SOA  ns1 admin  (
                                        3       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns1
        NS      ns2
ns1     A       192.1.1.27
ns2     A       192.1.1.37
17      PTR     www.lmy.com.



4,配置DNS从服务器
### 192.1.1.37 上面配置
~]# yum install bind -y
~]# vim /etc/named.conf
options {
        listen-on port 53 { localhost; };
        allow-query     { any; };
        allow-transfer  {none;};


~]# vim /etc/named.rfc1912.zones
zone "lmy.com"{
        type slave;
        masters { 192.1.1.27;};
        file "slaves/lmy.com.zone.slave";
};
zone "1.1.192.in-addr.arpa"{
        type slave;
        masters { 192.1.1.27;};
        file "slaves/192.1.1.zone.slave";
};

named]# systemctl restart named


### 在主DNS 192.1.1.27 上面配置
named]# vim /etc/named.conf
options {	
 		allow-transfer  {192.1.1.37;};


named]# vim  /var/named/lmy.com.zone 
$TTL 1D
@       IN SOA  ns1 admin  (
                                        3       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns1
        NS      ns2
ns1     A       192.1.1.27
ns2     A       192.1.1.37
www     A       192.1.1.17
aaa     A       1.1.1.1

named]# systemctl restart named
或
named]# rndc reload
server reload successful

5,配置com DNS服务器
### 192.1.1.47 
named]# vim /etc/named.conf
options {
        listen-on port 53 { localhost; };
        allow-query     { any; };


named]# vim /etc/named.rfc1912.zones
zone "com"{
        type master;
        file "com.zone";
};


named]# vim com.zone
$TTL 1D
@       IN SOA  ns1 admin  (
                                        4       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
                NS      ns1
lmy             NS      ns2
lmy             NS      ns3
ns1             A       192.1.1.47
ns2             A       192.1.1.27
ns3             A       192.1.1.37

named]# systemctl restart named


6,配置. DNS服务器

named]# vim /etc/named.conf
options {
        listen-on port 53 { localhost; };
        allow-query     { any; };


zone "." IN {
        type master;
        file "root.zone";
};



named]# vim /var/named/root.zone 

$TTL 1D
@       IN SOA  ns1 admin  (
                                        4       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
                NS      ns1
com             NS      ns2
ns1             A       192.1.1.57
ns2             A       192.1.1.47

named]# systemctl start  named


7, 配置forward 服务器
### 在192.1.1.77上配置
named]# vim /etc/named.conf
options {
        listen-on port 53 { localhost; };
        allow-query     { any; };

 dnssec-enable no;  
 dnssec-validation no;


~]# vim /var/named/named.ca 
.                       518400  IN      NS      a.root-servers.net.
a.root-servers.net.     518400  IN      A       192.1.1.57



8, 配置landns 服务器

192.1.1.67

 ~]# vim /etc/named.conf
 options {
        forward         only;
        forwarders      { 192.1.1.77;};


 dnssec-enable no;  
 dnssec-validation no;


9, 测试
[root@pc ~]# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 192.1.1.67
[root@pc ~]# curl www.lmy.com
www.lmy.com
[root@pc ~]#