centos7 部署 DNS 主從

centos7 部署 DNS 主從

• 環境

名稱	ip地址	cpu	內存
yz-dns-master	10.148.100.81	4c	8G
yz-dns-slave	10.148.100.82	4c	8G

• yz-dns-master 主配置

#配置dns 監牢模式
yum install bind bind-chroot  -y

#主要文件說明
/var/named/chroot/etc/named.conf   #主配置文件
/var/named/chroot/var/named/       #區域數據庫文件

#準備配置文件
cp -p  /etc/named.conf  /var/named/chroot/etc/ 
cp -p /var/named/named.*  /var/named/chroot/var/named/

#修改主配置文件,master 節點主動通知從節點要比從節點拉主節點配置文件要快，因此此處要配置 master 節點主動推配置文件至 從slave 節點。
vim /var/named/chroot/etc/named.conf

options {
        listen-on port 53 { 10.148.100.81; };
        directory       "/var/named";
        allow-query     { any; };
        recursion yes;
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
        forwarders { 114.114.114.114; 219.141.140.10; };
};

//logging {
//        channel default_debug {
//               file "data/named.run";
//                severity dynamic;
//       };
//};


logging {
    channel query_log {
        file "query.log" versions 10 size 2G;
        severity info;
        print-time yes;
        print-severity yes;
        print-category yes;
    };
    category queries { query_log; };
};


zone "." IN {
        type hint;
        file "named.ca";
};

zone "moviebook.cn" IN {
        //hint master slave forward
        allow-update { none; };
        allow-transfer { 10.148.100.82; };
        also-notify { 10.148.100.82; };
        check-names ignore;
        type master;
        file "moviebook.cn.zone";
};

#修改本地解析文件
cat /etc/resolv.conf
nameserver 10.148.100.81

#增加區域數據庫文件
cd  /var/named/chroot/var/named 
cp -p named.localhost  moviebook.cn.zone

#修改區域數據庫文件
vim /var/named/chroot/var/named/moviebook.cn.zone

$TTL 1D
moviebook.cn.   IN SOA  ns1.moviebook.cn. rname.invalid. (
                                        21      ; serial
                                        30      ; refresh
                                        20      ; retry
                                        1W      ; expire
                                        300 )   ; minimum
        NS      ns1.moviebook.cn.
;A
;PTR
;MX
;CNAME
ns1             A       10.148.100.88
test-yingpu     A       10.148.100.88
sport           A       10.148.100.89
news            CNAME   test-yingpu
www             A       122.14.233.94
mytest01        A       10.148.100.99


#檢測
named-checkconf  /var/named/chroot/etc/named.conf
named-checkzone moviebook.cn /var/named/chroot/var/named/moviebook.cn.zone

#啓動
systemctl  start  named-chroot
systemctl  enable  named-chroot

#檢測 udp
netstat  -anput  |grep  53  

#測試
dig
host
nslookup

• yz-dns-slave 從配置

#注意
主配置文件不會同步
同步的是區域數據庫文件

#配置dns 監牢模式
yum install bind bind-chroot  -y

#從named.conf 主配置文件修改，注意查看文件權限
vim /var/named/chroot/etc/named.conf 

options {
        listen-on port 53 { 10.148.100.82; };
        directory       "/var/named";
        allow-query     { any; };
        recursion yes;
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
        masterfile-format text;
        forwarders { 114.114.114.114; 219.141.140.10; };
};

//logging {
//        channel default_debug {
//               file "data/named.run";
//                severity dynamic;
//       };
//};

logging {
    channel query_log {
        file "query.log" versions 10 size 2G;
        severity info;
        print-time yes;
        print-severity yes;
        print-category yes;
    };
    category queries { query_log; };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "moviebook.cn" IN {
        //hint master slave forward
        type slave;
        file "moviebook.cn.zone";
        masters { 10.148.100.81; };
        check-names ignore;
};

#修改本地解析文件
cat /etc/resolv.conf
nameserver 10.148.100.82

#檢測
named-checkconf  /var/named/chroot/etc/named.conf
named-checkzone moviebook.cn /var/named/chroot/var/named/moviebook.cn.zone

#啓動
systemctl  start  named-chroot
systemctl  enable  named-chroot

#檢測 udp
netstat  -anput  |grep  53  

#查看數據庫配置文件均從master 節點同步至從節點
#cd  /var/named/chroot/var/named
# ll
drwxr-x--- 7 root  named   4096 Mar 20 06:32 chroot
drwxrwx--- 2 named named   4096 Feb 24 01:17 data
drwxrwx--- 2 named named   4096 Feb 24 01:17 dynamic
drwxr-xr-x 2 root  root    4096 Mar 21 14:58 logs
-rw-r--r-- 1 named named    479 Mar 22 11:28 moviebook.cn.zone
-rw-r----- 1 root  named   2253 Apr  5  2018 named.ca
-rw-r----- 1 root  named    152 Dec 15  2009 named.empty
-rw-r----- 1 root  named    152 Jun 21  2007 named.localhost
-rw-r----- 1 root  named    168 Dec 15  2009 named.loopback
-rw-r--r-- 1 named named 362555 Mar 22 11:31 query.log
drwxrwx--- 2 named named   4096 Feb 24 01:17 slaves

#測試
dig
host
nslookup

• 主從測試

#登錄主節點，修改  配置文件新增加A記錄 desktop A  122.14.233.93
vim  /var/named/chroot/var/named/moviebook.cn.zone

#加載配置文件，使其生效
# rndc reload
server reload successful

#查看從節點
A記錄已同步完成，序列號也同步完成

#測試解析
# nslookup   desktop.moviebook.cn
Server:         10.148.100.82
Address:        10.148.100.82#53

Name:   desktop.moviebook.cn
Address: 122.14.233.93

#查看均已解析成功。