centos6.5服务器网站配置,centos6.5 配置智能DNS域名解析服务器

配置智能DNS域名解析服务器

智能DNS域名解析服务器概述

智能DNS是域名服务在业界首创的智能解析服务。能自动判断访问者的IP地址并解析出对应的IP地址,使网通用户会访问到网通服务器,电信用户会访问到电信服务器。

智能DNS就是根据用户的来路,自动智能化判断来路IP返回给用户,而不需要用户进行选择。

配置智能DNS域名解析服务器的步骤及示例

实验环境:

b3ec75230c7a4d61a4cb82be1693a72e.png

智能DNS服务器拓补图

DNS服务器配置

确认本机的网络地址、保证网络连通性

网关GateWay服务器ping DNS服务器IP:192.168.1.108可以ping通。

[root@localhost ~]# ping 192.168.1.108

PING 192.168.1.108 (192.168.1.108) 56(84) bytes of data.

64 bytes from 192.168.1.108: icmp_seq=1 ttl=64 time=2.01 ms

64 bytes from 192.168.1.108: icmp_seq=2 ttl=64 time=0.874 ms

64 bytes from 192.168.1.108: icmp_seq=3 ttl=64 time=0.836 ms

64 bytes from 192.168.1.108: icmp_seq=4 ttl=64 time=0.957 m

DNS服务器IP配置

[root@localhost ~]# ip a

1: lo: mtu 16436 qdisc noqueue state UNKNOWN

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000

link/ether 00:0c:29:c2:14:a8 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.108/24 brd 192.168.1.255 scope global eth0

inet6 fe80::20c:29ff:fec2:14a8/64 scope link

valid_lft forever preferred_lft forever

3: pan0: mtu 1500 qdisc noop state DOWN

link/ether 2e:6c:45:d6:ba:2e brd ff:ff:ff:ff:ff:ff

没有安装bind软件包需要安装

[root@localhost ~]# rpm -ivh /media/CentOS_6.5_Final/Packages/bind-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

warning: /media/CentOS_6.5_Final/Packages/bind-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY

Preparing...                ########################################### [100%]

1:bind                   ########################################### [100%]

查看网卡设置

[root@localhost ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

192.168.1.0     0.0.0.0         255.255.255.0   U     1      0        0 eth0

0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0

修改配置文件/etc/named.conf

先备份配置文件

[root@localhost etc]# cp -p named.conf named.conf.$(date +%F)

[root@localhost etc]# vim named.conf

options {

listen-on port 53 { 192.168.1.108; };

directory       "/var/named";

allow-query     { any; };

recursion yes;

};

logging {

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

acl lan {

192.168.1.0/24;

};

acl cnc {

203.18.17.0/24;

};

acl dx {

78.19.25.0/24;

};

view "LAW" IN {

match-clients {

loclhost;

lan;

};

recursion yes;

include "chroot/etc/lan.zone";

};

view "CNC" IN {

match-clients { cnc; };

include "chroot/etc/cnc.zone";

};

view "DX" IN {

match-clients { dx; };

include "chroot/etc/dx.zone";

};

view "other" IN {

match-clients { any; };

include "chroot/etc/other.zone";

};

建立各线路的配置文件

[root@localhost ~]# cd /var/named/chroot/etc/

注意:/chroot/etc/没有这个目录需要安装bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm软件包

新建lan.zone文件

[root@localhost etc]# vim lan.zone

zone "amber.com" IN {

type master;

file "amber.com.zone.lan";

};

~

[root@localhost etc]# cp lan.zone cnc.zone

[root@localhost etc]# vim cnc.zone

zone "amber.com" IN {

type master;

file "amber.com.zone.cnc";

};

[root@localhost etc]# cp lan.zone dx.zone

[root@localhost etc]# vim dx.zone

zone "amber.com" IN {

type master;

file "amber.com.zone.dx";

};

~

[root@localhost etc]# cp dx.zone other.zone

other.zone无需修改

建立区域数据文件

[root@localhost etc]# cd /var/named/

[root@localhost named]# cp -p named.empty amber.com.zone.lan

[root@localhost named]# vim amber.com.zone.lan

$TTL 86400

@       IN SOA  amber.com. root.ns1.amber.com. (

2018052401      ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      ns1.amber.com.

ns1     A       192.168.1.108

ftp     A       78.19.25.6

ftp     A       203.18.17.6

~

[root@ns1 named]# cp -p amber.com.zone.lan amber.com.zone.cnc

[root@ns1 named]# vim amber.com.zone.cnc

$TTL 86400

@       IN SOA  amber.com. root.ns1.amber.com. (

2018052401      ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      ns1.amber.com.

ns1     A       203.18.17.2

ftp     A       203.18.17.6

~

[root@ns1 named]# cp -p amber.com.zone.lan amber.com.zone.dx

[root@ns1 named]# vim amber.com.zone.dx

$TTL 86400

@       IN SOA  amber.com. root.ns1.amber.com. (

2018052401      ; serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      ns1.amber.com.

ns1     A       78.19.25.2

ftp     A       78.19.25.6

重启named服务

[root@ns1 named]# named-checkconf /etc/named.conf

[root@ns1 named]# named-checkzone amber.com amber.com.zone.lan

zone amber.com/IN: loaded serial 2018052401

OK

[root@ns1 named]# named-checkzone amber.com amber.com.zone.cnc

zone amber.com/IN: loaded serial 2018052401

OK

[root@ns1 named]# named-checkzone amber.com amber.com.zone.dx

zone amber.com/IN: loaded serial 2018052401

OK

[root@ns1 named]# service named restart

停止 named:                                               [确定]

Generating /etc/rndc.key:                                  [确定]

启动 named:                                               [确定]

配置网关服务器

[root@localhost ~]# ip a

1: lo: mtu 16436 qdisc noqueue state UNKNOWN

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

inet6 ::1/128 scope host

valid_lft forever preferred_lft forever

2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:ce:53:25 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.1/24 brd 192.168.1.255 scope global eth0

inet6 fe80::20c:29ff:fece:5325/64 scope link

valid_lft forever preferred_lft forever

3: eth1: mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:ce:53:2f brd ff:ff:ff:ff:ff:ff

inet 203.18.17.2/24 brd 203.18.17.255 scope global eth1

inet6 fe80::20c:29ff:fece:532f/64 scope link

valid_lft forever preferred_lft forever

4: eth2: mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:ce:53:39 brd ff:ff:ff:ff:ff:ff

inet 78.19.25.2/24 brd 78.19.25.255 scope global eth2

inet6 fe80::20c:29ff:fece:5339/64 scope link

valid_lft forever preferred_lft forever

5: pan0: mtu 1500 qdisc noop state DOWN

link/ether 36:6e:75:68:0f:b1 brd ff:ff:ff:ff:ff:ff

[root@localhost ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

192.168.1.0     0.0.0.0         255.255.255.0   U     1      0        0 eth0

78.19.25.0      0.0.0.0         255.255.255.0   U     0      0        0 eth2

203.18.17.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1

169.254.0.0     0.0.0.0         255.255.0.0     U     1003   0        0 eth1

169.254.0.0     0.0.0.0         255.255.0.0     U     1004   0        0 eth2

0.0.0.0         78.19.25.1      0.0.0.0         UG    0      0        0 eth2

开启路由转发功能

[root@localhost ~]# vim /etc/sysctl.conf

net.ipv4.ip_forward = 0 改为1

[root@localhost ~]# sysctl -p

net.ipv4.ip_forward = 1

客户机测试

网卡连接方式vmnet-1模拟内网测试,使用windows7系统测试机配置DNS服务器IP。

cdea32a388ba170673995bacc9762cf5.png

测试机配置IP

参与评论 您还未登录,请先 登录 后发表或查看评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
©️2022 CSDN 皮肤主题:数字20 设计师:CSDN官方博客 返回首页
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、C币套餐、付费专栏及课程。

余额充值