2021年山东题目DNS RNDC配置

dns rndc 的配置
1.产生rndc配置文件
[root@cs1 named]# rndc-confgen -c /dev/urandom > /etc/rndc.conf

2.将rndc.conf配置文件追加到/etc/named.conf dns配置文件里
[root@cs1 named]# cat /etc/rndc.conf >> /etc/named.conf

3.将 rndc.conf 配置文件覆盖/etc/rndc.key
[root@cs1 named]# cat /etc/rndc.conf > /etc/rndc.key
[root@cs1 named]# cat /etc/rndc.key

Start of rndc.conf

key “rndc-key” {
algorithm hmac-md5;
secret “CP4AKRIZ0k5YXrLh9fSTkg==”;
};

options {
default-key “rndc-key”;
default-server 127.0.0.1;
default-port 953;
};

End of rndc.conf

Use with the following in named.conf, adjusting the allow list as needed:

key “rndc-key” {