• 搭建互联网DNS构架


    author:JevonWei
    版权声明:原创作品


    构建"." DNS、"com" DNS及"danran.com",用户通过"电信运营商"DNS服务器转发到. DNS,然后分派到danran.com DNS上查询www.danran.com,130为120从DNS
    拓扑图如下

    image

    192.168.198.120主DNS

    1. 安装程序包

      yum -y install named
      systemctl start named
      systemctl enable named
      iptables -F
      setenforce 0

    2. vim /etc/named.conf

      options {
      listen-on port 53 { localhost; };
      allow-query { any; };

    3. vim /etc/named.rfc1912.zones

      zone "danran.com" IN {
      type master;
      file "danran.zone";
      };

    4. vim /var/named/danran.zone

      $TTL 1D
      @ IN SOA ns1.danran.com. dnsadmin.danran.cam. (
      0 ; serial
      1D ; refresh
      1H ; retry
      1W ; expire
      3H ) ; minimum
      NS ns1.danran.com.
      ns1 A 192.168.198.120
      www A 192.168.198.150

    5. chgrp named /var/named/danran.zone

    6. 修改DNS指向的根DNS

      vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

       .            3600000      NS    A.ROOT-SERVERS.NET.
       A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
      
    7. systemctl restart named

    192.168.198.130 从DNS

    1. 安装程序包

      yum -y install bind
      systemctl start named
      systemctl enable named
      iptables -F
      setenforce 0

    2. vim /etc/named.conf

      options {
      listen-on port 53 { localhost; };
      allow-query { any; };;
      }

    3. vim /etc/named.rfc1912.zones

      从DNS的正向解析文件记录
      zone "danran.com" IN {
      type slave; DNS类型为从属DNS
      master { 192.168.198.120;}; 主DNS为192.168.198.134
      file "slaves/danran.slave"; 从DNS的数据库文件为slaves/danran.slave
      };

    4. 修改DNS指向的根DNS

      vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

       .            3600000      NS    A.ROOT-SERVERS.NET.
       A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
      
    5. systemctl restart named

    6. rndc reload

    192.168.198.110 com DNS

    1. 安装程序包

      yum -y install bind
      systemctl start named
      systemctl enable named
      iptables -F
      setenforce 0

    2. vim /etc/named.conf

      options {
      listen-on port 53 { localhost; };
      allow-query { any; };
      dnssec-enable no;
      dnssec-validation no;
      }

    3. vim /etc/named.rfc1912.zones

      zone "com" IN {
      type master;
      file "com.zone";
      };

    4. vim /var/named/com.zone

      $TTL 1D
      @ IN SOA ns1.com. dnsadmin.cam. (
      0 ; serial
      1D ; refresh
      1H ; retry
      1W ; expire
      3H ) ; minimum
      NS ns1.com.
      ns1 A 192.168.198.110

       danran  NS      ns2
       ns2     A       192.168.198.120 \子域委派
       danran  NS      ns3
       ns3     A       192.168.198.130
      
    5. chgrp named /var/named/com.zone

    6. 修改DNS指向的根DNS

      vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

       .            3600000      NS    A.ROOT-SERVERS.NET.
       A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
      
    7. systemctl restart named

    192.168.198.100 .根 DNS

    1. 安装程序包

      yum -y install bind
      systemctl start named
      systemctl enable named
      iptables -F
      setenforce 0

    2. vim /etc/named.conf

      options {
      listen-on port 53 { localhost; };
      allow-query { any; };
      dnssec-enable no;
      dnssec-validation no;
      }

    3. 将vim /etc/named.conf配置文件中的.DNS的zone类型修改为master

      zone "." IN {
      type master;
      file "root.zone"; . 根文件名修改为root.zone
      };

    4. 修改.根文件对应的zone文件

      vim /etc/named.rfc1912.zones
      zone "." IN {
      type master;
      file "root.zone"; . 根文件名修改为root.zone
      };

    3.4 二选一
    1. vim /var/named/root.zone

      $TTL 1D
      @ IN SOA ns1. dnsadmin (
      0 ; serial
      1D ; refresh
      1H ; retry
      1W ; expire
      3H ) ; minimum
      NS ns1
      ns1 A 192.168.198.100

       com     NS      ns2
       ns2     A       192.168.198.110 \子域委派为com域
      
    2. chgrp named /var/named/com.zone

    3. systemctl restart named

    192.168.198.200 电信 DNS

    1. 安装程序包

      yum -y install bind
      systemctl start named
      systemctl enable named
      iptables -F
      setenforce 0

    2. vim /etc/named.conf

      options {
      listen-on port 53 { localhost; };
      allow-query { any; };
      dnssec-enable no;
      dnssec-validation no;
      }

    3. 修改DNS指向的根DNS

      vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

       .            3600000      NS    A.ROOT-SERVERS.NET.
       A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
      
    4. systemctl restart named

    192.168.198.10 访问测试

    dig www.danran.com @192.168.198.200      
    

    DNS的相关内容点击链接

    http://119.23.52.191/dns服务/

    创建子域及view

    http://119.23.52.191/创建dns子域及view/

    搭建转发及从DNS

    http://119.23.52.191/主从及转发dns搭建/

    danran
  • 相关阅读:
    win7 下如何安装 Microsoft Web Application Stress Tool
    [译文]casperjs的API-mouse模块
    【性能测试】jmeter的坑(1)——如何在多网卡情况下正确连接
    [性能分析]端口限制
    [性能分析]linux文件描述符
    python 对mongodb进行压力测试
    常用jar包信息
    Basic Grammer
    Maven 知识汇总
    【Linux】Linux常用命令
  • 原文地址:https://www.cnblogs.com/JevonWei/p/7247689.html
Copyright © 2020-2023  润新知