linux下的dns服务

来源：互联网发布：域名授权系统编辑：程序博客网时间：2024/06/05 09:12

DNS

一

1）dns：（Domain Name System，域名系统），因特网上作为域名和IP地址相互映射的一个分布式数据库，能够使用户更方便的访问互联网，而不用去记住能够被机器直接读取的IP数串。通过主机名，最终得到该主机名对应的IP地址的过程叫做域名解析（或主机名解析）。DNS协议运行在UDP协议之上，使用端口号53。

2）安装部署dns

主配置文件： /etc/named.conf
子配置文件： /etc/named.rfc1912.zones
数据目录; /var/name
yum install bind -y
systemctl start named（第一次要敲键盘）
systemctl enable named

systemctl stop firewalld

查看端口 ss -antlupe | grep named

二高速缓存dns
vim /etc/named.conf
11    listen-on port 53 { any; }; 开放网卡端口
17    allow-query { any; }; 允许所有人访问
18    forwarders { 172.25.254.250; }; 当自己不知道的时候问谁

systemctl restart named

测试：

在客户主机：

vim /etc/resolv.conf

nameserver 172.25.254.100 （服务端的ip地址）

dig www.baidu.com 解析这个网址

三权威dns的正向解析
   biu.com.
vim /etc/name.rfc1912.zone
zone "biu.com" IN {
        type master;
        file "biu.com.zone";
        allow-update { none; };
};

cd /var/name

cp -p named.localhost westos.com.zone
vim /var/named/biu.com.zone
$TTL 1D
@       IN SOA dns.biu.com. root.biu.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
           NS       dns.biu.com.
dns       A        172.25.254.141
www     A        172.25.254.220

测试

dig www.westos.com

四权威dns的反向解析
vim /etc/named.rfc1912.zone
zone "254.25.172.in-addr.arpa" IN {
        type master;
        file "westos.com.ptr";
        allow-update { none; };
};

cd /var/named/

cp -p named.localhost westos.com.ptr
vim westos.com.ptr
$TTL 1D
@       IN SOA dns.westos.com. root.westos.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns.westos.com.
dns     A       172.25.254.141
141     PTR     www.westos.com.

systemctl restart named

测试：
dig -x 172.25.254.141

五 dns的双向解析

1） vim /etc/named.conf

view localnet {
        match-clients { 172.25.254.141; };
        zone "." IN {
                type hint;
                file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
};
view any {
        match-clients { any; };
        zone "." IN {
                type hint;
                file "named.ca";
};
include "/etc/named.rfc1912.zones.inter";
include "/etc/named.root.key";
}

2 ）
cd /var/named/
cp -p westos.com.zone westos.com.inter
vim westos.com.inter
$TTL 1D
@       IN SOA dns.biu.com. root.biu.com. (
                                        0         ; serial(对比一致性，如果不一致则发现配置改过，最大十位)
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
          NS        dns.biu.com.
dns    A           1.1.1.141
www    A         1.1.1.220

3）

cp /etc/named.rfc1912.zones /etc/named.rfc1912.zones.inter -p
vim /etc/named.rfc1912.zones.inter
zone "biu.com" IN {
        type master;
        file "biu.com.inter";
        allow-update { none; };
};

测试：dig www.biu.com

六辅助dns

主dns的设定

vim /etc/named.rfc1912.zones.inter
zone "biu.com" IN {
        type master;
        file "biu.com.inter";
        allow-update { none; };
        also-notify { 172.25.254.241; };允许241主机同步

systemctl restart named

辅助dns上
yum install bind -y
systemctl restart named
systemctl stop firewalld
vim /etc/named.conf
   listen-on port 53 { any; }; 开放网卡端口
   allow-query { any; }; 允许所有人访问
vim /etc/named.rfc1912.zones
zone "biu.com" IN {
        type slave;
        masters {172.25.254.141;};同步141主机
        file "slaves/biu.com.inter";
        allow-update { none; };
};

systemctl restart named

测试
vim /etc/resolv.conf
nameserver 172.25.254.141

dig www.biu.com

vim /etc/resolv.conf
nameserver 172.25.254.241

dig www.biu.com

没有更改时：

更改：更改时必须更改serial的数值。最大十位

七 dns的远程更新

基于ip的

在141主机上

chmod +w /var/named

vim /etc/name.rfc1912.zones.inter
zone "biu.com" IN {
        type master;
        file "biu.com.inter";
        allow-update { 172.25.254.241; };
        also-notify { 172.25.254.241; };
};

systemctl restart named

测试：
在241这台主机上
nsupdate
> server 172.25.254.141 添加
> update add bbs.biu.com 86400 A 1.1.1.1
> send
> server 172.25.254.141 删除
> update dalete bbs.biu.com
> send

基于key的

cp -p /etc/rndc.key /etc/biu.key

dnssec-keygen -a HMAC-MD5 -b 128 -n HOST biu

cat Kbiu.+157+03321.key

vim /etc/biu.key
key "biu" {
algorithm hmac-md5;
secret "OIuDrqAPIIx1Po7jsWDVAw==";
};

vim /etc/named.conf
include "/etc/biu.key";
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

vim /etc/name.rfc1912.zone.inter
zone "biu.com" IN {
        type master;
        file "biu.com.inter";
        allow-update { key biu; };
        also-notify { 172.25.254.241; };
};