系统准备
配置iptables
iptables -F
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -P INPUT DROP
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -p udp --dport 53 -j ACCEPT
iptables -A INPUT -p tcp --dport 3306 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -i lo -p all -j ACCEPT
service iptables save
service iptables restart
关闭selinux
sed -i s/SELINUX=enforcing/SELINUX=disabled/g /etc/sysconfig/selinux
setenforce 0
安装配置mysql
二进制安装
yum -y install lrzsz
cd /usr/local/src
rz
tar zxvf mysql* -C /usr/local
cd /usr/local
ln -sv mysql* mysql
cd mysql
mkdir -pv /data/mysql
useradd -r -U -s /sbin/nologin -d /data/mysql mysql
chown mysql:mysql /data/mysql -R
chown mysql:mysql /usr/local/mysql -R
scripts/mysql_install_db --user=mysql --datadir=/data/mysql
chown -R root .
cp support-files/my-large.cnf /etc/my.cnf
core=`cat /proc/cpuinfo |grep "processor" |wc -l`
sed -i "s/thread_concurrency = 8/thread_concurrency = `expr 2 * $core`/g" /etc/my.cnf
sed -i -e '/[mysqld]/a datadir = /data/mysql' /etc/my.cnf
cp support-files/mysql.server /etc/rc.d/init.d/mysqld
chmod +x /etc/rc.d/init.d/mysqld
chkconfig mysqld on
ln -sv /usr/local/mysql/include /usr/include/mysql
echo '/usr/local/mysql/lib' > /etc/ld.so.conf.d/mysql.conf
ldconfig
echo -e 'PATH=/usr/local/mysql/bin:$PATH' >> /etc/profile
source /etc/profile
mysql建立表
service mysqld start
mysql_secure_ installation
mysql>create database dns_view;
mysql>use dns_view;
CREATE TABLE `dnstb` (
`id` int(10) unsigned NOT NULL auto_increment,
`zone` varchar(255) NOT NULL,
`host` varchar(255) NOT NULL default '@',
`type` enum('MX','CNAME','NS','SOA','A','PTR') NOT NULL,
`data` varchar(255) default NULL,
`ttl` int(11) NOT NULL default '600',
`view` char(20) default 'OP',
`mx_priority` int(11) default NULL,
`refresh` int(11) NOT NULL default '600',
`retry` int(11) NOT NULL default '3600',
`expire` int(11) NOT NULL default '86400',
`minimum` int(11) NOT NULL default '3600',
`serial` bigint(20) NOT NULL default '2011061200',
`resp_person` varchar(64) NOT NULL default 'root.foo.com.',
`primary_ns` varchar(64) NOT NULL default 'ns1.foo.com.',
`data_count` int(11) NOT NULL default '0',
PRIMARY KEY (`id`),
KEY `type` (`type`),
KEY `host` (`host`),
KEY `zone` (`zone`)
) ENGINE=MyISAM AUTO_INCREMENT=1 DEFAULT CHARSET=gbk;
mysql授权：
grant all privileges on dns_view.* to root@'172.16.1.104' identified by '123456';
安装配置bind9.11
编译安装bind9.11
yum -y install gcc zlib-devel perl
cd /usr/local/src
tar zxvf bind-9.11.0-P3.tar.gz
cd bind-9.11.0-P3
./configure --prefix=/usr/local/bind --with-dlz-mysql=/usr/local/mysql --enable-treads=no --enable-largefile --disable-ipv6 --with-openssl=no
make && make install
echo -e 'PATH=/usr/local/bind/bin:/usr/local/bind/sbin:$PATH' >> /etc/profile
source /etc/profile
配置rndc
cd /usr/local/bind/etc/
echo -e "ajksdfhiwurhi23y789asd8fh23bjkfasdf2iu3jkweafsdfl" > random
rndc-confgen -r random > rndc.conf
tail -n10 rndc.conf | head -n9 |sed -e s/#//g > named.conf
配置bind
logging {
channel query_log {
file "/var/log/named.log" versions 3 size 20m;
severity info;
print-time yes;
print-category yes;
print-severity yes;
};
category queries {
query_log;
};
category lame-servers {
null;
};
};
options {
directory "/usr/local/bind/etc";
forwarders {119.29.29.29;8.8.8.8;};
forward only ;
pid-file "named.pid";
allow-query {any;};
allow-query-cache { any; };
allow-recursion { any; };
# recursion yes;
dnssec-enable no;
dnssec-validation no;
listen-on port 53 {
192.168.1.5;
};
#listen-on-v6 port 53 { any;};
};
include "/usr/local/bind/etc/ip/dev.txt";
include "/usr/local/bind/etc/ip/prod.txt";
include "/usr/local/bind/etc/view.conf";
配置acl和view
mkdir ip
vi ip/dev.txt
acl dev{
10.1.1.0/24;
172.16.1.0/24;
192.168.36.0/24;
};
vi ip/prod.txt
acl prod{
172.16.2.0/24;
};
vi view.conf
view "dev" {
match-clients {dev;};
dlz "Mysql zone" {
database "mysql
{host=127.0.0.1 dbname=dns_view ssl=false port=3306 user=root pass=123456 }
{select zone from dnstb where zone = '$zone$' and view = 'dev' limit 1 }
{select ttl, type, mx_priority, case when lower(type)='txt' then concat('"', data,
'"') when lower(type) = 'soa' then concat_ws(' ', data, resp_person, serial,
refresh, retry, expire, minimum) else data end as mydata from dnstb where zone
= '$zone$' and host = '$record$' and (view = 'dev' or view = 'OP')}
{}
{select ttl, type, host, mx_priority, case when lower(type)='txt' then concat('"',
data, '"') else data end as mydata, resp_person, serial, refresh, retry, expire,
minimum from dnstb where zone = '$zone$' and view='dev'}
{select zone from xfr_table where zone = '$zone$' and client = '$client$' and
view='dev' limit 1}
{update data_count set count = count + 1 where zone ='$zone$' and view='dev'}";
};
};
view "prod" {
match-clients { prod; };
dlz "Mysql zone" {
database "mysql
{host=127.0.0.1 dbname=dns_view ssl=false port=3306 user=root pass=123456 }
{select zone from dnstb where zone = '$zone$' and view = 'prod' limit 1 }
{select ttl, type, mx_priority, case when lower(type)='txt' then concat('"', data,
'"') when lower(type) = 'soa' then concat_ws(' ', data, resp_person, serial,
refresh, retry, expire, minimum) else data end as mydata from dnstb where zone
= '$zone$' and host = '$record$' and (view = 'prod' or view = 'OP')}
{}
{select ttl, type, host, mx_priority, case when lower(type)='txt' then concat('"',
data, '"') else data end as mydata, resp_person, serial, refresh, retry, expire,
minimum from dnstb where zone = '$zone$' and view='prod'}
{select zone from xfr_table where zone = '$zone$' and client = '$client$' and
view='prod' limit 1}
{update data_count set count = count + 1 where zone ='$zone$' and view='prod'}";
};
};
view "any" {
match-clients { any;};
dlz "Mysql zone" {
database "mysql
{host=127.0.0.1 dbname=dns_view ssl=false port=3306 user=root pass=123456 }
{select zone from dnstb where zone = '$zone$' and view = 'any' limit 1 }
{select ttl, type, mx_priority, case when lower(type)='txt' then concat('"', data,
'"') when lower(type) = 'soa' then concat_ws(' ', data, resp_person, serial,
refresh, retry, expire, minimum) else data end as mydata from dnstb where zone
= '$zone$' and host = '$record$' and (view = 'any' or view='OP')}
{}
{select ttl, type, host, mx_priority, case when lower(type)='txt' then concat('"',
data, '"') else data end as mydata, resp_person, serial, refresh, retry, expire,
minimum from dnstb where zone = '$zone$' and view='any'}
{select zone from xfr_table where zone = '$zone$' and client = '$client$' and
view='any' limit 1}
{update data_count set count = count + 1 where zone ='$zone$' and view='any'}";
};
};
服务使用
启动和重载配置文件
named -4 -uroot -c /usr/local/bind/etc/named.conf -d 9
rndc reload
添加dns记录
windows上安装navicat for mysql 添加DNS记录如图：
备用DNS：
步骤
安装bind和Mysql
配置rndc
配置BIND+VIEW，配置和主DNS一样，除了listen-on port 53里面的IP
配置mysql主从复制，备用DNS上的mysql为从库，设置同步的数据库为dns_view。