linux dns解析开启,linux--DNS解析

一、安装部署dnsyum install bind -y

systemctl start named

systemctl enable named

systemctl stop firewlld systemctl disable firewalld

图示：安装bind

图示：开启服务关闭火墙

主配置文件： /etc/named.conf

子配置文件： /etc/name.rfc1912.zones

数据目录：  /var/named

二、高速缓存dns

vim /etc/named.conf

11       listen-on port 53 { any; };         #让所有用户IP可以访问

17       allow-query     { any; };         #客户群体

18       forwarders      {172.25.254.250; };  #访问中介

图示：修改配置文件

cat /etc/services | grep domain

图示：查看

systemctl restart named

测试：

在客户主机

vim /etc/resolv.conf

nameserver 172.25.254.121

dig www.baidu.com

图示：测试结果

三、权威DNS的正向解析

vim /etc/named.rfc.1912.zone

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.zone";

28         allow-update { none; };

29 };

cd /var/named/

cp -p named.localhost westos.com.zone

vim westos.com.zone

1 $TTL 1D

2 @       IN SOA  dns.westos.com. root.westos.com. (

3                                         0       ; serial

4                                         1D      ; refresh

5                                         1H      ; retry

6                                         1W      ; expire

7                                         3H )    ; minimum

8         NS      dns.westos.com

9 dns     A       172.25.254.121

10 www     A       172.25.254.111

systemctl restart named

图示：修改配置文件

测试：

dig www.westos.com

cat /etc/resolv.conf

# Generated by NetworkManager

search ilt.example.com example.com

nameserver 172.25.254.121

图示：测试结果

四、反向解析

vim /etc/named.rfc.1912.zone

48 zone "254.25.172.in-addr.arpa" IN {

49         type master;

50         file "westos.com.ptr";

51         allow-update { none; };

52 };

ls

cp -p named.loopback westos.com.ptr

vim westos.com.ptr

1 $TTL 1D

2 @       IN SOA  dns.westos.com. root.westos.com. (

3                                         0       ; serial

4                                         1D      ; refresh

5                                         1H      ; retry

6                                         1W      ; expire

7                                         3H )    ; minimum

8         NS      dns.westos.com.

9 dns     A       172.25.254.100

10 100     PTR     www.westos.com.

systemctl restart named

图示：配置文件及操作

测试：

dig -x 172.25.254.121

图示：测试结果

五、dns双向解析

vim /etc/named.conf

50 view localnet {

51          match-clients { 172.25.254.221; };

52          zone "." IN {

53                      type hint;

54                      file "named.ca";

55 };

56

57 include "/etc/named.rfc1912.zones";

58 include "/etc/named.root.key";

59 };

60

61 view any {

62          match-clients { any; };

63          zone "." IN {

64                      type hint;

65                      file "named.ca";

66 };

67

68 include "/etc/named.rfc1912.zones";

69 include "/etc/named.root.key";

70 };

cp /etc/named.rfc1912.zones /etc/named.rfc1912.zones.inter -p

vim /etc/named.rfc1912.zones.inter

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.inter";

28         allow-update { none; };

29 };

cp -p westos.com.zone westos.com.inter

vim westos.com.inter

1 $TTL 1D

2 @       IN SOA   dns.westos.com. root.westos.com. (

3                                         0       ; serial

4                                         1D      ; refresh

5                                         1H      ; retry

6                                         1W      ; expire

7                                         3H )    ; minimum

8         NS      dns.westos.com.

9 dns     A       1.1.1.121

10 www     A       1.1.1.111

%s/172.25.254/1.1.1/g

systemctl restart named

图示：修改配置内容

测试：在221主机上  dig www.westos.com.inter

图示：测试结果

六、辅助dns

主dns的设定

vim /etc/named.rfc1912.zones

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.zone";

28         allow-update { none; };

29         also-notify { 172.25.254.221; };

systemctlrestart named

注意：每次更改A记录文件后必须更改辅助serial的值，最高为10位。

vim /var/named/westos.com.inter

4                                 0          ; serial

辅助dns主机中的设定

yum install bind -y

systemctl restart named

systemctl stop firewalld

vim /etc/sysconfig/selinux

disabled

vim /etc/named.conf

#       listen-on port 53 { 127.0.0.1; };

listen-on-v6 port 53 { ::1; };

directory       "/var/named";

dump-file       "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

#       allow-query     { localhost; };

vim /etc/named.rfc1912.zones

zone "westos.com" IN {

type slave;

masters {172.25.254.121; };

file "slaves/westos.com.inter";

allow-update { none; };

};

systemctl restart named

测试：

vim /etc/resolv.conf

nameserver 172.25.254.221

dig www.westos.com

图示：修改配置文件

图示：测试结果

七、dns的远程更新

(实验前需先备份)

基于ip

vim /etc/name.rfc1912.zone.inter

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.inter";

28         allow-update { 172.25.254.244; };

29         also-notify {172.25.254.244; };

30 };

systemctl restart named

图示：修改配置文件

测试

在221主机上

[root@localhost ~]# nsupdate

> server 172.25.254.121

> update add bbs.westos.com 86400 A 1.1.1.2 #添加

> send

> server 172.25.254.121

> update delete bbs.westos.com         #删除

> send

[root@dns-server named]# ls

data      named.empty      slaves                westos.com.ptr

dynamic   named.localhost  westos.com.inter      westos.com.zone

named.ca  named.loopback   westos.com.inter.jnl  

图示：记录生成过程

dig bbs.westos.com

;; ANSWER SECTION:

bbs.westos.com.     86400   IN  A   1.1.1.2

图示：测试结果

###

还原[root@dns-server named]# rm -fr westos.com.inter westos.com.inter.jnl

[root@dns-server named]# ls

data     named.ca     named.localhost  slaves          westos.com.zone

dynamic  named.empty  named.loopback   westos.com.ptr

[root@dns-server named]# cp -p /mnt/westos.com.inter .

###

*基于key的

cd /mnt

cp -p /etc/rndc.key /etc/westos.key  ##‘-p’复制所有

dnssec-keygen -a HMAC-MD5 -b 128 -n HOST westos

vim /etc/westos.key

1 key "westos" {

2         algorithm hmac-md5;

3         secret "ujuIHzR74r3ikunB3OblMQ==";

4 };

图示：更改文件内容

vim /etc/named.conf

41 include "/etc/westos.key";

42 logging {

43         channel default_debug {

44                 file "data/named.run";

图示：修改配置文件

vim /etc/named.rfc1912.zones.inter

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.inter";

28         allow-update { key westos; };

29         also-notify {172.25.254.221; };

30 };

systemctl restart named

图示：修改配置文件

测试

测试：

发送钥匙给测试主机

scp Kwestos.+157+60830.* root@172.25.254.121:/mnt

图示：发送钥匙

在有key 的主机中执行

[root@localhost mnt]# nsupdate -kKwestos.+157+60830.private

> update add bbs.westos.com 8000 A 1.1.1.0

> send

[root@localhost mnt]# nsupdate

> server 172.25.254.121

> update add ss.westos.com 8000 A 1.1.1.1

> send

update failed: REFUSED

图示：没钥匙更新失败

ddns

八、DDNS的配置

1.辅助设备

[root@dns-slave mnt]# hostnamectl set-hostname www.westos.com  ##修改主机名

[root@dns-slave mnt]# vim /etc/sysconfig/network-scripts/ifcfg-eth0

图示：编辑配置使得更改为动态获取ip

[root@dns-slave mnt]# systemctl restart network

2.设置dns主机

vim /etc/named.rfc1912.zones

25 zone "westos.com" IN {

26         type master;

27         file "westos.com.zone";

28         allow-update { none; };

29         also-notify { key westos; };

图示：修改配置文件

安装dhcp服务

[root@dns-server ~]# yum install dhcp -y              ##安装dhcp服务

[root@dns-server ~]# systemctl stop firewalld       ##关闭防火墙

[root@dns-server ~]# systemctl disable firewalld  ##设置开机不启动

[root@dns-server ~]#  cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf

cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y

[root@dns-server mnt]# cd /etc/dhcp/

[root@dns-server dhcp]# ls

dhclient.d  dhcpd6.conf  dhcpd.conf

图示：复制以及修改配置文件

 

[root@dns-server named]# vim westos.com.zone

图示 ：修改配置文件

[root@dns-server named]# systemctl restart named

监控测试

watch -n 1 dig www.westos.com.inter

图示：测试结果

##end##