安装bind9
安装基础epel-release源
root@localhost ~]# yum install epel-release -y
yum 安装bind9
root@localhost ~]# yum install vim bind bind-utils -y
修改named.conf配置文件
vim /etc/named.conf
和默认配置文件对比修改了两处
options { listen-on port 53 { 10.100.214.208; }; 修改成本地ip地址 listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; // allow-query { localhost; }; allow-query { any; }; ###此处修改
启动服务
检查是否正确
root@dns1 ~]# named-checkconf
root@dns1 ~]#
没有报错,就是配置正确
启动服务
[root@dns1 ~]# systemctl start named && systemctl enable named
Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service. [root@dns1 ~]# systemctl status named ● named.service - Berkeley Internet Name Domain (DNS) Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled) Active: active (running) since Mon 2021-08-09 09:18:13 CST; 11s ago Main PID: 24445 (named) CGroup: /system.slice/named.service └─24445 /usr/sbin/named -u named -c /etc/named.conf Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './DNSKEY/IN': 2001:503:c27::2:30#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './NS/IN': 2001:503:c27::2:30#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './DNSKEY/IN': 2001:500:9f::42#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './NS/IN': 2001:500:9f::42#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './DNSKEY/IN': 2001:500:1::53#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './NS/IN': 2001:500:1::53#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './DNSKEY/IN': 2001:7fd::1#53 Aug 09 09:18:13 dns1.host.com named[24445]: network unreachable resolving './NS/IN': 2001:7fd::1#53 Aug 09 09:18:13 dns1.host.com named[24445]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: key now trusted Aug 09 09:18:14 dns1.host.com named[24445]: resolver priming query complete
验证解析
配置DNS服务器指向
在/etc/resole里配置DNS服务器的ip地址为我们部署的主机ip
[root@dns1 ~]# cat /etc/resolv.conf # Generated by NetworkManager search host.com nameserver 114.114.114.114 nameserver 10.100.214.208
测试
[root@dns1 ~]# ping baidu.com PING baidu.com (220.181.38.148) 56(84) bytes of data. 64 bytes from 220.181.38.148 (220.181.38.148): icmp_seq=1 ttl=50 time=6.25 ms此 文档是根据
https://blog.stanley.wang