DNS（bind）添加A、CNAME、MX、PTR记录、智能DNS（ACL）

1、添加一条A记录（记得更改serial）：

vim /var/named/chroot/etc/lnh.com.zone

重启一下：

rndc reload

查看从服务器：

测试结果：

master结果：

第一种方法：是用resolv.conf中定义的DNS服务器查出百度主机的IP。

第二种方法（上述方法）：是用本地的DNS（127.0.0.1）来查cc.lnh.com主机的IP。

slave结果（在master上看的）：

2、CNAME记录（如上）

cname		CNAME	a.lnh.com.

3、MX记录（如上）

mx		MX 5	192.168.123.123
mx		MX 10 	191.1.1.1

4、PTR记录（反向解析）

MASTER：

[root@localhost etc]# cat view.conf 
view "View" {
  zone "lnh.com" {
        type    master;
        file    "lnh.com.zone";
        allow-transfer {
                192.168.222.146;
        };
        notify  yes;
        also-notify {
                192.168.222.146;
        };
  };
  zone "168.192.in-addr.arpa" {
        type    master;
        file    "168.192.zone";
        allow-transfer {
                192.168.222.146;
        };
        notify  yes;
        also-notify {
                192.168.222.146;
        };
  };

};

”168.192.in-addr.arpa“固定格式，ip反过来了。

[root@localhost etc]# cat 168.192.zone 
$TTL 3600       ; 1 hour
@                  IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
102.122		IN	PTR	a.lnh.com.
1.1		IN	PTR	B.lnh.com.

此时要看看权限：chown named.named 168.192.zone

Slave配置：

[root@localhost etc]# cat view.conf 
view "SlaveView" {
        zone "lnh.com" {
             type    slave;
             masters {192.168.222.145; };
             file    "slave.lnh.com.zone";
        };
        zone "168.192.in-addr.arpa" {
             type    slave;
             masters {192.168.222.145; };
             file    "slave.168.192.zone";
        };
 
};

这个是同步过来的：

[root@localhost etc]# cat slave.168.192.zone 
$ORIGIN .
$TTL 3600	; 1 hour
168.192.in-addr.arpa	IN SOA	op.lnh.com. dns.lnh.com. (
				2030       ; serial
				900        ; refresh (15 minutes)
				600        ; retry (10 minutes)
				86400      ; expire (1 day)
				3600       ; minimum (1 hour)
				)
			NS	op.lnh.com.
$ORIGIN 168.192.in-addr.arpa.
1.1			PTR	B.lnh.com.
102.122			PTR	a.lnh.com.

注意：a.lnh.com. 后面一定要有.

查看：

[root@localhost etc]# host 192.168.122.102 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases: 

102.122.168.192.in-addr.arpa domain name pointer a.lnh.com.

5、通过DNS实现负载均衡，，就是多加一条A记录，，这个有个问题，当这个后端服务器挂了，他也会解析，所以不建议用，，轮询的调度算法，没有健康监测。

[root@localhost etc]# host cc.lnh.com 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases: 

cc.lnh.com has address 123.123.123.124
cc.lnh.com has address 123.123.123.123

6、配置DNS视图（智能DNS），当DNS服务器接到请求时会匹配这两个组的ip，下面的加在include上，，此时就可以根据group来区分不用运营商分到不同的ip。

/var/named/chroot/etc
[root@localhost etc]# vim named.conf 
acl group1 {
  192.168.222.145;
};
acl group2 {
  192.168.222.146;
};

[root@localhost etc]# >view.conf
[root@localhost etc]# vim view.conf
[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# cat view.conf
view "GROUP1" {
  match-clients { group1; };
  zone "viewlnh.com" {
     type master;
     file "group1.viewlnh.com.zone";
 };
};
view "GROUP2" {
  match-clients { group2; };
  zone "viewlnh.com" {
     type master;
     file "group2.viewlnh.com.zone";
 };
};

[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# vim group1.viewlnh.com.zone

$ORIGIN .
$TTL 3600       ; 1 hour
viewlnh.com                     IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
$ORIGIN viewlnh.com.
op              A       192.168.122.1
view            A       192.168.122.1

[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# vim group2.viewlnh.com.zone

$ORIGIN .
$TTL 3600       ; 1 hour
viewlnh.com                     IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
$ORIGIN viewlnh.com.
op              A       192.168.122.2
view            A       192.168.122.2

修改权限

[root@localhost etc]# chown named.named group*

查看，在192.168.222.145上看

[root@localhost etc]# dig @192.168.222.145 view.viewlnh.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.5 <<>> @192.168.222.145 view.viewlnh.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49593
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;view.viewlnh.com.		IN	A

;; ANSWER SECTION:
view.viewlnh.com.	3600	IN	A	192.168.122.1

;; AUTHORITY SECTION:
viewlnh.com.		3600	IN	NS	op.lnh.com.

;; Query time: 1 msec
;; SERVER: 192.168.222.145#53(192.168.222.145)
;; WHEN: Wed Mar 21 18:33:51 2018
;; MSG SIZE  rcvd: 71

　

在192.168.222.146上看

[root@localhost etc]# dig @192.168.222.145 view.viewlnh.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.5 <<>> @192.168.222.145 view.viewlnh.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11962
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;view.viewlnh.com.		IN	A

;; ANSWER SECTION:
view.viewlnh.com.	3600	IN	A	192.168.122.2

;; AUTHORITY SECTION:
viewlnh.com.		3600	IN	NS	op.lnh.com.

;; Query time: 3 msec
;; SERVER: 192.168.222.145#53(192.168.222.145)
;; WHEN: Wed Mar 21 18:36:16 2018
;; MSG SIZE  rcvd: 71