1、配置 bind 服务，实现 www.magedu.org 域名解析
服务端 10.0.0.71
yum install -y bind bind-utils;systemctl enable --now named
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
vim /etc/named.rfc1912.zones
zone "magedu.org" IN {
type master;
file "magedu.org.zone";
};
cp -p /var/named/named.localhost /var/named/magedu.org.zone
vim /var/named/magedu.org.zone
$TTL 1D
@ IN SOA master admin (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
master A 10.0.0.71
www A 10.0.0.83
named-checkconf
named-checkzone magedu.org.zone /var/named/magedu.org.zone
rndc reload
web端 10.0.0.83
yum install -y httpd;echo www.magedu.org > /var/www/html/index.html；systemctl enable --now httpd
[root@centos8 ~]#curl 10.0.0.83
www.magedu.org
客户端 10.0.0.61
vim /etc/sysconfig/network-scripts/ifcfg-eth0
DNS1=10.0.0.71
service network restart
[root@centos6 ~]#cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 10.0.0.71
[root@centos6 ~]#dig www.magedu.org
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.magedu.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43660
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;www.magedu.org. IN A
;; ANSWER SECTION:
www.magedu.org. 86400 IN A 10.0.0.83
;; AUTHORITY SECTION:
magedu.org. 86400 IN NS master.magedu.org.
;; ADDITIONAL SECTION:
master.magedu.org. 86400 IN A 10.0.0.71
;; Query time: 0 msec
;; SERVER: 10.0.0.71#53(10.0.0.71)
;; WHEN: Sat Jul 25 21:49:12 2020
;; MSG SIZE rcvd: 85
2、配置 bind 服务，实现域名反向解析
接上面实验
服务端 10.0.0.71
vim /etc/named.rfc1912.zones
zone "0.0.10.in-addr.arpa" {
type master;
file "10.0.0.zone";
};
cp -p /var/named/named.loopback /var/named/10.0.0.zone
vim /var/named/10.0.0.zone
$TTL 1D
@ IN SOA ns1 admin (
1000 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS ns1.magedu.org.
100 PTR www.magedu.org.
named-checkconf
named-checkzone 0.0.10.in-addr.arpa 10.0.0.zone
rndc reload
客户端 10.0.0.61
[root@centos6 ~]#dig -x 10.0.0.100
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> -x 10.0.0.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1133
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.0.0.10.in-addr.arpa. IN PTR
;; ANSWER SECTION:
100.0.0.10.in-addr.arpa. 86400 IN PTR www.magedu.org.
;; AUTHORITY SECTION:
0.0.10.in-addr.arpa. 86400 IN NS ns1.magedu.org.
;; Query time: 1 msec
;; SERVER: 10.0.0.71#53(10.0.0.71)
;; WHEN: Sun Jul 26 11:37:22 2020
;; MSG SIZE rcvd: 87
3、配置 bind 服务，实现主从 DNS 服务配置：
主服务器 10.0.0.71
vim /etc/named.conf
allow-transfer { 10.0.0.72; };
dnssec-enable no;
dnssec-validation no;
vim /var/named/magedu.org.zone
$TTL 1D
@ IN SOA master admin (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
NS slave
master A 10.0.0.71
www A 10.0.0.83
slave A 10.0.0.72
named-checkconf
named-checkzone magedu.org.zone /var/named/magedu.org.zone
[root@centos7 ~]#rndc reload
server reload successful
从服务器 10.0.0.72
yum install -y bind bind-utils;systemctl enable --now named
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
allow-transfer { none; };
vim /etc/named.rfc1912.zones
zone "magedu.org" IN {
type slave;
masters { 10.0.0.71;};
file "slaves/magedu.org.slave";
};
rndc reload
ll /var/named/slaves/magedu.org.slave
-rw-r--r--. 1 named named 319 Jul 26 10:00 magedu.org.slave
修改一下版本号，看是否能继续同步
$TTL 1D
@ IN SOA master admin (
1 ; serial #版本号改为1
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
NS slave
master A 10.0.0.71
www A 10.0.0.83
slave A 10.0.0.72
ll /var/named/slaves/magedu.org.slave
-rw-r--r--. 1 named named 319 Jul 26 10:03 magedu.org.slave #已同步
4、 配置 bind 服务，实现子域服务器：
接上面实验
父域服务器 10.0.0.71
vim /var/named/magedu.org.zone
$TTL 1D
@ IN SOA master admin (
1 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
NS slave
shandong NS shandongs #注意：最前面的shandong不能省略
master A 10.0.0.71
www A 10.0.0.83
slave A 10.0.0.72
shandongs A 10.0.0.84
named-checkconf
[root@centos7 ~]#named-checkzone magedu.org.zone /var/named/magedu.org.zone
zone magedu.org.zone/IN: loaded serial 1
OK
[root@centos7 ~]#rndc reload
server reload successful
子域服务器 10.0.0.84
yum install -y bind bind-utils;systemctl enable --now named
vim /etc/named.conf
// listen-on port 53 { 127.0.0.1; };
// allow-query { localhost; };
allow-transfer { none; };
vim /etc/named.rfc1912.zones
zone "shandong.magedu.org" {
type master;
file "shandong.magedu.org.zone";
};
cp -p /var/named/named.localhost /var/named/shandong.magedu.org.zone
vim /var/named/shandong.magedu.org.zone
$TTL 1D
@ IN SOA master admin (
20072610 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS master
master A 10.0.0.84
websrv A 10.0.0.100
www CNAME websrv
db A 10.0.0.101
ab A 10.0.0.102
[root@centos8 ~]#named-checkconf
[root@centos8 ~]#named-checkzone shandong.magedu.org.zone /var/named/shandong.magedu.org.zone
zone shandong.magedu.org.zone/IN: loaded serial 20072610
OK
[root@centos8 ~]#rndc reload
server reload successful
客户端 10.0.0.61
[root@centos6 ~]#dig www.shandong.magedu.org
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6 <<>> www.shandong.magedu.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8610
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;www.shandong.magedu.org. IN A
;; ANSWER SECTION:
www.shandong.magedu.org. 86394 IN CNAME websrv.shandong.magedu.org.
websrv.shandong.magedu.org. 86394 IN A 10.0.0.100
;; AUTHORITY SECTION:
shandong.magedu.org. 86394 IN NS master.shandong.magedu.org.
;; ADDITIONAL SECTION:
master.shandong.magedu.org. 86394 IN A 10.0.0.84
;; Query time: 1 msec
;; SERVER: 10.0.0.71#53(10.0.0.71)
;; WHEN: Sun Jul 26 11:22:25 2020
;; MSG SIZE rcvd: 115