Linux DNS服务

一 、DNS高速缓存

实验前提
真机：打开网络可以上网，打开路由设备
虚拟机：设置网关可以上网，下在DNS服务器

（1）真机设置(将真机设置成路由)

[root@foundation68 ~]# firewall-cmd --add-masquerade 
success
[root@foundation68 ~]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: br0 enp2s0 virbr0 wlp3s0
  sources: 
  services: dhcpv6-client ftp http ssh
  ports: 
  protocols: 
  masquerade: yes
  forward-ports: 
  sourceports: 
  icmp-blocks: 
  rich rules: 
	
[root@foundation68 ~]# 

（2）虚拟机
1》设置虚拟机ip，加入网关（真机ip作为网关）和DNS

[root@localhost ~]# ping 114.114.114.114
PING 114.114.114.114 (114.114.114.114) 56(84) bytes of data.
64 bytes from 114.114.114.114: icmp_seq=1 ttl=58 time=117 ms
64 bytes from 114.114.114.114: icmp_seq=2 ttl=73 time=55.1 ms
64 bytes from 114.114.114.114: icmp_seq=3 ttl=88 time=94.5 ms
^C
--- 114.114.114.114 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 55.168/89.246/117.997/25.927 ms
[root@localhost ~]# 

2》设置yum元下载DNS服务

先dag一个网址查看响应时间

[root@localhost ~]# dig www.taobao.com

; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> www.taobao.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14334
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.taobao.com.			IN	A

;; ANSWER SECTION:
www.taobao.com.		80	IN	CNAME	www.taobao.com.danuoyi.tbcache.com.
www.taobao.com.danuoyi.tbcache.com. 157	IN A	111.13.210.219
www.taobao.com.danuoyi.tbcache.com. 157	IN A	111.13.210.218

;; Query time: 73 msec
;; SERVER: 114.114.114.114#53(114.114.114.114)
;; WHEN: Mon Nov 19 17:00:07 CST 2018
;; MSG SIZE  rcvd: 120

[root@localhost ~]# 

下载DNS

[root@localhost ~]# yum install bind.x86_64 

3》设置高速缓存
11注释硬盘配置文件的DNS

22将ip写进DNS配置文件(真机)

[root@foundation68 ~]# vim /etc/resolv.conf 
[root@foundation68 ~]# 

4》虚拟机缓存设置

[root@localhost ~]# vim /etc/named.conf 

注意：需关闭虚拟机火墙
测试（第一次dig时间长，缓存以后再dig响应时间为0）

[root@foundation68 ~]# dig www.taobao.com

; <<>> DiG 9.9.4-RedHat-9.9.4-37.el7 <<>> www.taobao.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58360
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;www.taobao.com.			IN	A

;; ANSWER SECTION:
www.taobao.com.		393	IN	CNAME	www.taobao.com.danuoyi.tbcache.com.
www.taobao.com.danuoyi.tbcache.com. 163	IN A	223.99.232.253
www.taobao.com.danuoyi.tbcache.com. 163	IN A	223.99.232.254

;; Query time: 28 msec
;; SERVER: 192.168.43.1#53(192.168.43.1)
;; WHEN: Tue Nov 20 20:05:05 CST 2018
;; MSG SIZE  rcvd: 120

[root@foundation68 ~]# dig www.taobao.com

; <<>> DiG 9.9.4-RedHat-9.9.4-37.el7 <<>> www.taobao.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57405
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.taobao.com.			IN	A

;; ANSWER SECTION:
www.taobao.com.		385	IN	CNAME	www.taobao.com.danuoyi.tbcache.com.
www.taobao.com.danuoyi.tbcache.com. 155	IN A	223.99.232.253
www.taobao.com.danuoyi.tbcache.com. 155	IN A	223.99.232.254

;; Query time: 0 msec
;; SERVER: 192.168.43.1#53(192.168.43.1)
;; WHEN: Tue Nov 20 20:05:12 CST 2018
;; MSG SIZE  rcvd: 112

[root@foundation68 ~]# 

---

二、DNS的正向解析（权威设置）

（1）进入DNS配置文件进行设置

[root@localhost ~]# vim /etc/named.conf 
[root@localhost ~]# 

# forwarders { 114.114.114.114; };

(2)添加需要维护的DNS

[root@localhost ~]# vim /etc/named.rfc1912.zones 
[root@localhost ~]# 

(3)正向解析

[root@localhost ~]# cd /var/named/
[root@localhost named]# ls
data  dynamic  named.ca  named.empty  named.localhost  named.loopback  slaves
[root@localhost named]# cp -p named.localhost westos.com.zone
[root@localhost named]# vim westos.com.zone 

(4)验证

[root@localhost named]# dig www.westos.com

; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> www.westos.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14862
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.westos.com.			IN	A

;; ANSWER SECTION:
www.westos.com.		86400	IN	A	172.25.254.10

;; AUTHORITY SECTION:
westos.com.		86400	IN	NS	dns.westos.com.

;; ADDITIONAL SECTION:
dns.westos.com.		86400	IN	A	172.25.254.168

;; Query time: 1 msec
;; SERVER: 172.25.254.168#53(172.25