目录
0.架构图
1.本节架构
| 本机 | IP | 角色 |
|---|---|---|
| hdss7-11.host.com | 10.4.7.11 | DNS服务器 |
2.安装bind（在hdss7-11上执行）
yum -y install bind-utils
3.配置/etc/named.conf
13 listen-on port 53 { 10.4.7.11; };
14 listen-on-v6 port 53 { ::1; };
21 allow-query { any; };
22 forwarders { 10.4.7.254; };
36 dnssec-enable no;
37 dnssec-validation no;
4.配置区域配置文件 /etc/named.rfc1912.zones
cat >> /etc/named.rfc1912.zones <<'eof'
zone "host.com" IN {
type master;
file "host.com.zone";
allow-update { 10.4.7.11; };
};
zone "od.com" IN {
type master;
file "od.com.zone";
allow-update { 10.4.7.11; };
};
> eof
5.配置主配置文件
cat > /var/named/host.com.zone << 'EOF'
$ORIGIN host.com.
$TTL 600 ; 10 minutes
@ IN SOA dns.host.com dnsadmin.host.com. (
2020092701 ; serial
10800 ; refresh (3 hours)
900 ; retry (15 minutes)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS dns.host.com.
$TTL 60 ; 1 minute
dns A 10.4.7.11
HDSS7-11 A 10.4.7.11
HDSS7-12 A 10.4.7.12
HDSS7-21 A 10.4.7.21
HDSS7-22 A 10.4.7.22
HDSS7-200 A 10.4.7.200
EOF
6.配置区域数据配置文件
cat > /var/named/od.com.zone <<'eof'
$ORIGIN od.com.
$TTL 600 ; 10 minutes
@ IN SOA dns.od.com dnsadmin.od.com. (
2020092701 ; serial
10800 ; refresh (3 hours)
900 ; retry (15 minutes)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS dns.od.com.
$TTL 60 ; 1 minute
dns A 10.4.7.11
harbor A 10.4.7.200
eof
7.添加权限
chown -R named: /var/named/
8.启动检查bind
named-checkconf
named-checkzone host.com /var/named/host.com.zone
named-checkzone od.com /var/named/od.com.zone
systemctl start named
systemctl enable named
netstat -tulnp | grep 53
dig -t A hdss7-21.host.com @10.4.7.11 +short
9.所有服务器配置指向dns
cat > /etc/resolv.conf <<'eof'
search host.com
nameserver 10.4.7.11
eof
10.验证dns
ping hdss7-11
ping hdss7-11.host.com
11.windows dns指向配置
