这里的要实现的是不同网段的客户端向dns服务器请求时,dns服务器会根据客户端的地址进行针对性的域名解析,返回与客户端相同网段的主机地址。
本例配置
dns服务器:
eth0:192.168.247.14/24
eth1:192.168.100.10/24
web服务器1:
192.168.247.15/24
web服务器2:
192.168.100.11/24
客户端1:
192.168.247.17/24
客户端2:
192.168.100.12/24
安装dns服务器
[root@use04 ~]# yum install bind bind-utils -y
修改dns主配置
[root@use04 ~]# vim /etc/named.conf
acl beijing {
192.168.247.0/24;
};
acl shanghai {
192.168.100.0/24;
};
acl other {
any;
};
options {
listen-on port 53 { localhost; };
allow-query { any; };
};
view view_beijing {
match-clients { beijing; };
include "/etc/named.rfc1912.zones.beijing";
};
view view_shanghai {
match-clients { shanghai; };
include "/etc/named.rfc1912.zones.shanghai";
};
view view_other {
match-clients { other; };
include "/etc/named.rfc1912.zones.other";
};
#include "/etc/named.rfc1912.zones";
主配置里的根主机记录要删除,即zone "."这个配置在删除,并要注释#include “/etc/named.rfc1912.zones”;
添加区域解析文件
[root@use04 ~]# cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.zones.beijing
[root@use04 ~]# vim /etc/named.rfc1912.zones.beijing
zone "." IN {
type hint;
file "named.ca";
};
zone "mage.com" {
type master;
file "mage.com.zone.beijing";
};
[root@use04 ~]# cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.zones.shanghai
[root@use04 ~]# vim /etc/named.rfc1912.zones.shanghai
zone "." IN {
type hint;
file "named.ca";
};
zone "mage.com" {
type master;
file "mage.com.zone.shanghai";
};
[root@use04 ~]# cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.zones.other
[root@use04 ~]# vim /etc/named.rfc1912.zones.other
zone "." IN {
type hint;
file "named.ca";
};
zone "mage.com" {
type master;
file "mage.com.zone.other";
};
添加rr记录
[root@use04 ~]# vim /var/named/mage.com.zone.beijing
$TTL 1D
@ IN SOA ns1 admin ( 0 1D 1H 1W 3H )
NS ns1
ns1 A 192.168.247.14
www A 192.168.247.15
[root@use04 ~]# cat /var/named/mage.com.zone.shanghai
$TTL 1D
@ IN SOA ns1 admin ( 0 1D 1H 1W 3H )
NS ns1
ns1 A 192.168.100.10
www A 192.168.100.11
[root@use04 ~]# cat /var/named/mage.com.zone.other
$TTL 1D
@ IN SOA ns1 admin ( 0 1D 1H 1W 3H )
NS ns1
ns1 A 192.168.247.14
www A 10.0.0.14
other的记录随意写。
检查配置
[root@use04 ~]# named-checkconf
[root@use04 ~]# named-checkzone www.mage.com /var/named/mage.com.zone.beijing
zone www.mage.com/IN: loaded serial 0
OK
[root@use04 ~]# named-checkzone www.mage.com /var/named/mage.com.zone.shanghai
zone www.mage.com/IN: loaded serial 0
OK
[root@use04 ~]# named-checkzone www.mage.com /var/named/mage.com.zone.other
zone www.mage.com/IN: loaded serial 0
OK
启动dns服务
[root@use04 ~]# systemctl restart named.service
[root@use04 ~]# systemctl enable named.service
Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
客户端测试
[root@use07 ~]# host www.mage.com 192.168.247.14
Using domain server:
Name: 192.168.247.14
Address: 192.168.247.14#53
Aliases:
www.mage.com has address 192.168.247.15
[root@use08 ~]# host www.mage.com 192.168.100.10
Using domain server:
Name: 192.168.100.10
Address: 192.168.100.10#53
Aliases:
www.mage.com has address 192.168.100.11