Linux下的主辅DNS服务器同步
一、系统环境介绍
系统:rhel8.0
control:192.168.200.150 -》主DNS(已配置)
node1:192.168.200.135 -》辅助DNS
node2:192.168.200.136
二、辅助DNS搭建
1.安装yum包
[root@node1 ~]# yum -y install bind bind-chroot
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
AppStream 165 kB/s | 3.2 kB 00:00
BaseOS 155 kB/s | 2.7 kB 00:00
ansiable 0.0 B/s | 0 B 00:00
Zabbix 1.3 kB/s | 2.9 kB 00:02
Failed to synchronize cache for repo 'ansiable', ignoring this repo.
Dependencies resolved.
===============================================================================================================================================
Package Arch Version Repository Size
===============================================================================================================================================
Installing:
bind x86_64 32:9.11.4-16.P2.el8 AppStream 2.1 M
bind-chroot x86_64 32:9.11.4-16.P2.el8 AppStream 99 k
Transaction Summary
===============================================================================================================================================
Install 2 Packages
Total size: 2.2 M
Installed size: 4.7 M
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64 1/2
Installing : bind-32:9.11.4-16.P2.el8.x86_64 1/2
Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64 1/2
Installing : bind-chroot-32:9.11.4-16.P2.el8.x86_64 2/2
Running scriptlet: bind-chroot-32:9.11.4-16.P2.el8.x86_64 2/2
Verifying : bind-32:9.11.4-16.P2.el8.x86_64 1/2
Verifying : bind-chroot-32:9.11.4-16.P2.el8.x86_64 2/2
Installed products updated.
Installed:
bind-32:9.11.4-16.P2.el8.x86_64 bind-chroot-32:9.11.4-16.P2.el8.x86_64
Complete!
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
- 18.
- 19.
- 20.
- 21.
- 22.
- 23.
- 24.
- 25.
- 26.
- 27.
- 28.
- 29.
- 30.
- 31.
- 32.
- 33.
- 34.
- 35.
- 36.
- 37.
- 38.
- 39.
- 40.
- 41.
- 42.
- 43.
- 44.
- 45.
- 46.
- 47.
2.设置服务自启
3.编辑dns主配置文件
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
secroots-file "/var/named/data/named.secroots";
recursing-file "/var/named/data/named.recursing";
allow-query { any; };
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
4.编辑区域文件
zone "huaxia.com" IN {
type slave;
masters { 192.168.200.150; };
file "slaves/named.zx";
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "200.168.192.in-addr.arpa" IN {
type slave;
masters { 192.168.200.150; };
file "slaves/named.fx";
};
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
- 18.
- 19.
- 20.
5.配置正向文件
备注:,正向、反向数据库文件主辅同步时间频率改为 10 秒,增加序列号,为方便快速看到同步效果,并且重启 named 服务。(生产环境中保持默认即可。)
6.配置反向文件
7.重启服务和放行防火墙
三、客户端指向DNS服务器
四、测试正向解析和反向解析
六、测试主从同步
1.修改主DNS的正、反向配置文件
$TTL 1D
@ IN SOA ns.huaxia.com. root. (
2021062211 ; serial
10 ; refresh
10 ; retry
1W ; expire
30 ) ; minimum
@ IN NS ns.huaxia.com.
ns IN A 192.168.200.150
server0 IN A 192.168.200.150
www IN A 192.168.200.150
web IN CNAME web.huaxia.com.
* IN A 192.168.200.150
mail IN A 192.168.200.150
@ MX 10 mail.huaxia.com.
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
2.客户端检查是否dns同步
150.200.168.192.in-addr.arpa name = server0.example.com.
150.200.168.192.in-addr.arpa name = www.huaxia.com.
150.200.168.192.in-addr.arpa name = mail.huaxia.com.
[root@node2 ~]# nslookup server0.huaxia.com
Server: 192.168.200.135
Address: 192.168.200.135#53
Name: server0.huaxia.com
Address: 192.168.200.150
[root@node2 ~]# nslookup www.huaxia.com
Server: 192.168.200.135
Address: 192.168.200.135#53
Name: www.huaxia.com
Address: 192.168.200.150
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
- 18.
- 19.