bind篇01-Bind+Keepalived安装高可用DNS集群

本文主要对bind进行安装配置，并且搭配keepalived实现高可用。

1、系统环境准备

这里我们使用的是centos7的操作系统，默认使用yum安装的情况下，bind的程序named会安装到/var/named目录下，注意保证分区的大小，当然也可以使用chroot包来修改目录，这里使用默认目录

[root@tiny-cloud /root]# lsb_release -a
LSB Version:    :core-4.1-amd64:core-4.1-noarch:cxx-4.1-amd64:cxx-4.1-noarch:desktop-4.1-amd64:desktop-4.1-noarch:languages-4.1-amd64:languages-4.1-noarch:printing-4.1-amd64:printing-4.1-noarch
Distributor ID: CentOS
Description:    CentOS Linux release 7.9.2009 (Core)
Release:        7.9.2009
Codename:       Core

2、bind安装

bind的安装非常简单，默认的centos系统的yum源中就包含了其安装包，不同的系统版本对应的bind版本略有差异但是不大。

[root@tiny-server ~]# yum list | egrep ^bind.x86_64
bind.x86_64                                               32:9.11.20-5.el8_3.1                              appstream
[root@tiny-server ~]# cat /etc/redhat-release
CentOS Linux release 8.3.2011

[root@tiny-cloud ~]# yum list | egrep ^bind.x86_64
bind.x86_64                                 32:9.11.4-26.P2.el7_9.5    updates
[root@tiny-cloud ~]# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)

一般我们只需要安装bind和bind-utils这两个包，前者是bind的主要程序named和控制工具rndc等，后者则是一些常用工具如dig命令等。

[root@tiny-cloud /home/named]# yum install bind bind-utils

安装完成之后我们就会发现系统主要新增了/var/named、/etc/named和/etc/named*一系列文件

[root@tiny-cloud /home/named]# ll /var/named/
total 28K
drwxrwx--- 2 named named 4.0K Apr 29 22:05 data
drwxrwx--- 2 named named 4.0K Apr 29 22:05 dynamic
-rw-r----- 1 root  named 2.3K Apr  5  2018 named.ca
-rw-r----- 1 root  named  152 Dec 15  2009 named.empty
-rw-r----- 1 root  named  152 Jun 21  2007 named.localhost
-rw-r----- 1 root  named  168 Dec 15  2009 named.loopback
drwxrwx--- 2 named named 4.0K Apr 29 22:05 slaves
[root@tiny-cloud /home/named]# ll /etc/named*
-rw-r----- 1 root named 1.8K Apr 29 22:06 /etc/named.conf
-rw-r--r-- 1 root named 3.9K Apr 29 22:06 /etc/named.iscdlv.key
-rw-r----- 1 root named  931 Jun 21  2007 /etc/named.rfc1912.zones
-rw-r--r-- 1 root named 1.9K Apr 13  2017 /etc/named.root.key

/etc/named:
total 0

同时我们可以使用systemd来对named服务进行管理：

[root@tiny-cloud /home/named]# systemctl enable named.service
Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
[root@tiny-cloud /home/named]# systemctl start named.service
[root@tiny-cloud /home/named]# systemctl status named.service
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2021-05-20 16:26:36 CST; 10min ago
 Main PID: 28777 (named)
    Tasks: 4
   Memory: 58.6M
   CGroup: /system.slice/named.service
           └─28777 /usr/sbin/named -u named -c /etc/named.conf

May 20 16:31:49 tiny-cloud named[28777]:   validating net/SOA: got insecure response; parent indicates it should be secure
May 20 16:31:49 tiny-cloud named[28777]: no valid RRSIG resolving 'edgekey.net/DS/IN': 192.12.94.30#53
May 20 16:31:49 tiny-cloud named[28777]:   validating net/SOA: got insecu