Linux Centos6.52.6.32-431.el6.x86_64 （简称 Centos 6.5）
1.2 DNS服务器所需软件版本
bind-9.8.2-0.30.rc1.el6_6.3.x86_64
bind-utils-9.8.2-0.30.rc1.el6_6.3.x86_64
bind-chroot-9.8.2-0.30.rc1.el6_6.3.x86_64
2.1 yum源配置
| # CentOS-Base.repo # # The mirror system uses the connecting IP address of the client and the # update status of each mirror to pick mirrors that are updated to and # geographically close to the client. You should use this for CentOS updates # unless you are manually picking other mirrors. # # remarked out baseurl= line instead. # #
[base] name=CentOS-$releasever - Base baseurl=http://centos.mirrors.yg.ucloud.cn/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#released updates [updates] name=CentOS-$releasever - Updates baseurl=http://centos.mirrors.yg.ucloud.cn/centos/$releasever/updates/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#additional packages that may be useful [extras] name=CentOS-$releasever - Extras baseurl=http://centos.mirrors.yg.ucloud.cn/centos/$releasever/extras/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus baseurl=http://centos.mirrors.yg.ucloud.cn/centos/$releasever/centosplus/$basearch/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
#contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib baseurl=http://centos.mirrors.yg.ucloud.cn/centos/$releasever/contrib/$basearch/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 |
| yum install -y bind bind-chroot bind-utils
|
3 DNS服务器文件配置
cp -rv/usr/share/doc/bind-9.8.2/sample/etc/* /var/named/chroot/etc/
cp -rv/usr/share/doc/bind-9.8.2/sample/var/* /var/named/chroot/var/
主配置文件named.conf配置
| vim /var/named/chroot/etc/named.conf
options { listen-on port 53 { 10.10.102.[s1] ; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { any; }; recursion yes;
dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto;
/* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic"; };
logging { channel default_debug { file "data/named.run"; severity dynamic; }; };
zone "." IN { type hint; file "named.ca"; };
include "/etc/named.rfc1912.zones"; #include "/etc/named.root.key";
|
3.2 辅助区域配置文件named.rfc1912.zones配置
| vim /var/named/chroot/etc/named.rfc1912.zones // // Provided by Red Hat caching-nameserver package // // ISC BIND named zone configuration for zones recommended by // RFC 1912 section 4.1 : localhost TLDs and address zones // and http://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt // (c)2007 R W Franks // // See /usr/share/doc/bind*/sample/ for example named configuration files. //
zone "localhost.localdomain" IN { type master; file "named.localhost"; allow-update { none; }; };
zone "localhost" IN { type master; file "named.localhost"; allow-update { none; }; };
zone "phzc.com" IN { type master; file "phzc.com.zone"; allow-update { none; }; };
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN { type master; file "named.loopback"; allow-update { none; }; };
zone "1.0.0.127.in-addr.arpa" IN { type master; file "named.loopback"; allow-update { none; }; };
zone "10.10.in-addr.arpa" IN { type master; file "phzc.com.reverse"; allow-update { none; }; };
zone "0.in-addr.arpa" IN { type master; file "named.empty"; allow-update { none; }; };
|
3.3 正解配置文件phzc.com.zone配置
| vim /var/named/chroot/var/named/phzc.com.zone $TTL 1D @ IN SOA localhost. root.phzc.com. ( 20150627 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum IN NS phzcudns001.phzc.com. phzcudns001 IN A 10.10.102.124
phzcuinternal001 IN A 10.10.81.127 phzcuuat001 IN A 10.10.108.65 phzcuuat002 IN A 10.10.63.99 phzcuuat003 IN A 10.10.91.99 phzcuuat004 IN A 10.10.97.74 phzcusftp001 IN A 10.10.11.81 phzcudns001 IN A 10.10.102.124 phzcunginx001 IN A 10.10.100.243 phzcunginx002 IN A 10.10.104.62 phzcutomcat001 IN A 10.10.103.76 phzcutomcat002 IN A 10.10.111.98 phzcutomcat003 IN A 10.10.111.184 phzcutomcat004 IN A 10.10.108.171 phzcutomcat005 IN A 10.10.112.16 phzcutomcat006 IN A 10.10.112.145 phzcutomcat007 IN A 10.10.104.88 phzcutomcat008 IN A 10.10.103.130 phzcumysql001 IN A 10.10.112.140 phzcumysql002 IN A 10.10.100.246 hadoop001 IN A 10.10.112.120 hadoop002 IN A 10.10.103.85 hadoop003 IN A 10.10.105.251 hadoop004 IN A 10.10.101.170 hadoop005 IN A 10.10.103.169 phzcumysql003 IN A 10.10.109.62
|
3.4 反解配置文件phzc.com.reverse配置
| vim /var/named/chroot/var/named/phzc.com.reverse
$TTL 1D @ IN SOA phzcudns001.phzc.com. root.phzc.com. ( 20150627 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum IN NS phzcudns001.phzc.com.
127.81 IN PTR phzcuinternal001 65.108 IN PTR phzcuuat001 99.63 IN PTR phzcuuat002 99.91 IN PTR phzcuuat003 74.97 IN PTR phzcuuat004 81.11 IN PTR phzcusftp001 124.102 IN PTR phzcudns001 243.100 IN PTR phzcunginx001 62.104 IN PTR phzcunginx002 76.103 IN PTR phzcutomcat001 98.111 IN PTR phzcutomcat002 184.111 IN PTR phzcutomcat003 171.108 IN PTR phzcutomcat004 16.112 IN PTR phzcutomcat005 145.112 IN PTR phzcutomcat006 88.104 IN PTR phzcutomcat007 13.103 IN PTR phzcutomcat008 14.112 IN PTR phzcumysql001 246.100 IN PTR phzcumysql002 12.112 IN PTR hadoop001 85.103 IN PTR hadoop002 251.105 IN PTR hadoop003 17.101 IN PTR hadoop004 169.103 IN PTR hadoop005 62.109 IN PTR phzcumysql003
|
DNS服务
4.1 启用DNS服务
/etc/init.d/named restart
| netstat -nalp | grep :53 tcp 0 0 10.10.102.124:53 0.0.0.0:* LISTEN 12573/named tcp 0 0 ::1:53 :::* LISTEN 12573/named udp 0 0 10.10.102.124:53 0.0.0.0:* 12573/named udp 0 0 ::1:53 :::* 12573/named |
4.3 关闭DNS服务
| /etc/init.d/named stop
|
客户端安装和使用 DNS服务验证
5.1 修改DNS server地址
| vim /etc/resolv.conf 添加 nameserver 10.10.102.124
备注： DNS server本身除了修改/etc/resolv.conf 还需要 vim /etc/sysconfig/network-scripts/ifcfg-eth0 添加 DNS1=10.10.102.124 重启网络 /etc/init.d/network restart
|
5.2 验证DNS服务器搭建成功
| 正解验证 nslookup phzcuuat001.phzc.com Server: 10.10.102.124 Address: 10.10.102.124#53
Name: phzcuuat001.phzc.com Address: 10.10.108.65
反解验证 nslookup 10.10.108.65 Server: 10.10.102.124 Address: 10.10.102.124#53
65.108.10.10.in-addr.arpa name = phzcuuat001.10.10.in-addr.arpa. |