搭建DNS服务器

搭建DNS服务器

本文将描述在CentOS 7上使用bind9搭建DNS服务器并配置泛域名解析。

1、安装bind、bind-chroot、bind-utils

[root@node-dns ~]# yum install -y bind bind-chroot bind-util

bind-chroot使bind运行在单独的文件系统中，提高安全性；

2、初始化chroot运行环境

[root@node-dns ~]# /usr/libexec/setup-named-chroot.sh /var/named/chroot on

### 查看初始化结果 ###
[root@node-dns ~]# ll /var/named/chroot/etc/
-rw-r--r--. 5 root root     388 10月  3 2016 localtime
drwxr-x---. 2 root named      6 1月  22 21:30 named
-rw-r-----. 1 root named   1705 3月  22 2016 named.conf
-rw-r--r--. 1 root named   3923 1月  22 21:30 named.iscdlv.key
-rw-r-----. 1 root named    931 6月  21 2007 named.rfc1912.zones
-rw-r--r--. 1 root named   1587 5月  22 2017 named.root.key
drwxr-x---. 3 root named     25 4月  24 11:00 pki
-rw-r--r--. 1 root root    6545 6月   7 2013 protocols
-rw-r--r--. 1 root root  670293 6月   7 2013 services

### 启动通过bind-chroot启动bind
[root@node-dns ~]# systemctl start named-chroot
### 查看运行状态 ###
[root@node-dns ~]# systemctl status named-chroot
● named-chroot.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named-chroot.service; disabled; vendor preset: disabled)
   Active: active (running) since 二 2018-04-24 11:01:44 CST; 7s ago
  Process: 2358 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} -t /var/named/chroot $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 2355 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -t /var/named/chroot -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 2361 (named)
   CGroup: /system.slice/named-chroot.service
           └─2361 /usr/sbin/named -u named -c /etc/named.conf -t /var/named/chroot

4月 24 11:01:44 node-dns named[2361]: managed-keys-zone: loaded serial 0
4月 24 11:01:44 node-dns systemd[1]: Started Berkeley Internet Name Domain (DNS).
4月 24 11:01:44 node-dns named[2361]: zone 0.in-addr.arpa/IN: loaded serial 0
4月 24 11:01:44 node-dns named[2361]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
4月 24 11:01:44 node-dns named[2361]: zone localhost.localdomain/IN: loaded serial 0
4月 24 11:01:44 node-dns named[2361]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
4月 24 11:01:44 node-dns named[2361]: zone localhost/IN: loaded serial 0
4月 24 11:01:44 node-dns named[2361]: all zones loaded
4月 24 11:01:44 node-dns named[2361]: running
4月 24 11:01:44 node-dns named[2361]: error (network unreachable) resolving './DNSKEY/IN': 2001:7fd::1#53
### 设置开机自启动 ###
[root@node-dns ~]# systemctl enable named-chroot
Created symlink from /etc/systemd/system/multi-user.target.wants/named-chroot.service to /usr/lib/systemd/system/named-chroot.service.