linux Redhat9.5采用DNS主从实现跨网段解析

主从服务器DNS实现跨网段解析

一、服务器规划

服务器	IP地址	网关
DNS-Master	192.168.100.100	192.168.100.254
DNS-Slave	192.168.200.200	192.168.200.254
路由器	192.168.100.254 192.168.200.254
客户端	192.168.200.210	192.168.200.254

二、主服务器配置

1、安装bind

yum -y install bind

2、修改主配置文件

options {
        listen-on port 53 { 192.168.100.100; };
        allow-query     { any; };

3、配置区域配置文件

zone "aaa.com" IN {
        type master;
        file "aaa.localhost";
        allow-transfer { 192.168.200.200; };	#声明允许同步数据的主机
        also-notify { 192.168.200.200; };
};

zone "100.168.192.in-addr.arpa" IN {
        type master;
        file "aaa.empty";						#不能写到一个配置文件里
        allow-transfer { 192.168.200.200; };	#声明允许同步数据的主机
};

zone "200.168.192.in-addr.arpa" IN {
        type master;
        file "aaa-1.empty";
        allow-transfer { 192.168.200.200; };	#声明允许同步数据的主机
};

4、配置正向解析文件

路径：/var/named

cp -p named.localhost aaa.lcoalhost
vim aaa.localhost


$TTL 1D
@       IN SOA  aaa.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns.aaa.com.
dns     A       192.168.100.100
www     A       192.168.200.200			##将www.aaa.com解析为192.168.200.200

5、配置反向解析文件

• /var/named/aaa.empty

$TTL 3H
@       IN SOA  aaa.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns.aaa.com.
100     PTR     dns.aaa.com.

• /var/named/aaa-1.empty

$TTL 3H
@       IN SOA  aaa.com. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      www.aaa.com.
200     PTR     www.aaa.com.

6、检查并启动服务

named-checkconf -z && systemctl start named

三、从服务器配置

1、安装bind

yum -y install bind

2、配置主配置文件

options {
        listen-on port 53 { 192.168.200.200; };		##从服务器的IP地址
        allow-query     { any; };

3、修改区域配置文件

zone "aaa.com" IN {
        type slave;				#类型为：slave 	从服务器
        masters { 192.168.100.100; };	#主服务器的IP
        allow-notify { 192.168.100.100; };
        file "slaves/aaa.com.localhost";	#在/var/named/slaves/
};


zone "100.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.100.100; };
        allow-notify { 192.168.100.100; };
        file "slaves/aaa.com.empty";
};

zone "200.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.100.100; };
        allow-notify { 192.168.100.100; };
        file "slaves/aaa-1.com.empty";
};

4、检查并启动服务

named-checkconf -z && systemctl start named			##成功后在/var/named下出现文件

四、路由器配置

配置双网卡

100网段vm7 200网段vm9

开启路由转发

echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf
sysctl -p

五、客户端验证

1、配置dns为主服务器和从服务器的IP

vim /etc/resolv.conf
nameserver 192.168.100.100
nameserver 192.168.200.200

2、使用nslookup命令解析www.aaa.com