卢松松网站源码,电商网站里的图片,企业微信公众平台开发,网站建设可研报告DNS服务器的部署 DNS----Domain Name System域名系统 作用#xff1a; 1)将域名#xff0c; 主机名解析成对应的IP地址 正向解析 2)将IP地址解析成对应的主机名#xff0c;域名反向解析 区域zone 正向区域uplooking.com 反向区域X.X.X.in-addr.arpa 172.16.80.0/2480.16.172… DNS服务器的部署 DNS----Domain Name System域名系统 作用 1)将域名 主机名解析成对应的IP地址 正向解析 2)将IP地址解析成对应的主机名域名反向解析 区域zone 正向区域uplooking.com 反向区域X.X.X.in-addr.arpa 172.16.80.0/2480.16.172.in-addr.arpa 记录Record A记录主机记录www.uplooking.comA192.168.1.1 NS记录标识DNS服务器自身的名称 NSdns1.uplooking.com. dns1.uplooking.comA192.168.1.2 MX记录标识邮件服务器的名称 MX 10mail.uplooking.com. mail.uplooking.com.A192.168.1.3 CNAME记录别名记录 m.mail.com.CNAMEmail.uplooking.com. PTR记录反向指针记录 192.168.1.1PTRwww.uplooking.com. DNS域名结构 .根域 www.jd.com------------ www.jd.com. com jd baidu tabao cn org gov DNS解析方式 递归 客户端只需要向DNS服务器发送一次请求 迭代 客户端需要发送多次DNS请求 部署DNS服务器 软件 bind, bind-chroot 伪根/var/named/chroot /etc/named.conf ------ /var/named/chroot/etc/named.conf 配置文件 主配置文件/var/named/chroot/etc/named.conf建立区域 记录文件/var/named/chroot/var/named/* 服务 named, named-chroot 端口 53/udp负责接收客户端DNS请求 53/tcp负责主从服务器数据同步 示例搭建DNS服务器 web.uplooking.com192.168.1.1网站服务器 ftp.uplooking.com192.168.1.2FTP服务器 mail.uplooking.com192.168.1.3 邮件服务器 准备工作 关闭SELinux, 防火墙 配置YUM源 1安装软件 [rootlocalhost ~]# yum install -y bind bind-chroot 2编辑DNS的主配置文件创建区域uplooking.com [rootlocalhost ~]# vim /var/named/chroot/etc/named.conf options { directory /var/named; }; zone uplooking.com { type master; file uplooking.com.zone; }; 区域类型 hint根域 master 主区域 slave从区域 3复制记录文件的模板并编辑 [rootlocalhost ~]# cp /usr/share/doc/bind-9.8.2/sample/var/named/named.localhost /var/named/chroot/var/named/uplooking.com.zone [rootlocalhost ~]# vim /var/named/chroot/var/named/uplooking.com.zone $TTL 1D IN SOA uplooking.com. 454452000.qq.com. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS dns1.uplooking.com. dns1 A 192.168.122.105 web A 192.168.1.1 ftp A 192.168.1.2 MX 5 mail.uplooking.com. mail A 192.168.1.3 4启动named服务 [rootdns ~]# systemctl start named-chroot [rootdns ~]# systemctl start named [rootdns ~]# systemctl enable named Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service. [rootdns ~]# systemctl enable named-chroot Created symlink from /etc/systemd/system/multi-user.target.wants/named-chroot.service to /usr/lib/systemd/system/named-chroot.service. [rootdns ~]# [rootdns ~]# ss -antp | grep named LISTEN 0 10 192.168.122.105:53 : users:((named,pid2249,fd21)) [rootdns ~]# ss -anup | grep named UNCONN 0 0 192.168.122.105:53 : users:((named,pid2249,fd513)) 5测试 注意 配置方法如下 [rootlocalhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0 Generated by dracut initrd NAMEeth0 ONBOOTyes BOOTPROTOnone TYPEEthernet IPADDR192.168.122.121 NETMASK255.255.255.0 GATEWAY192.168.122.1 DNS1192.168.122.105 [rootlocalhost ~]# cat /etc/resolv.conf Generated by NetworkManager nameserver 192.168.122.105 [rootlocalhost ~]# 测试工具 nslookup [rootlocalhost ~]# nslookup server Default server: 192.168.122.105 Address: 192.168.122.105#53 web.uplooking.com Server:192.168.122.105 Address:192.168.122.105#53 Name:web.uplooking.com Address: 192.168.1.1 ftp.uplooking.com Server:192.168.122.105 Address:192.168.122.105#53 Name:ftp.uplooking.com Address: 192.168.1.2 mail.uplooking.com Server:192.168.122.105 Address:192.168.122.105#53 Name:mail.uplooking.com Address: 192.168.1.3 exit dig dig -t [rootlocalhost ~]# dig -t A web.uplooking.com ; DiG 9.9.4-RedHat-9.9.4-29.el7 -t A web.uplooking.com ;; global options: cmd ;; Got answer: ;; -HEADER ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;web.uplooking.com.INA ;; ANSWER SECTION: web.uplooking.com.86400INA192.168.1.1 ;; AUTHORITY SECTION: uplooking.com.86400INNSdns1.uplooking.com. ;; ADDITIONAL SECTION: dns1.uplooking.com.86400INA192.168.122.105 ;; Query time: 1 msec ;; SERVER: 192.168.122.105#53(192.168.122.105) ;; WHEN: 三 2月 22 11:45:42 CST 2017 ;; MSG SIZE rcvd: 97 利用DNS记录实现负载均衡效果 webA192.168.1.1 webA192.168.1.4 泛域名记录 uplooking.com. A 192.168.1.1 *.uplooking.com.A192.168.1.1 示例2 建立DNS反向区域实现反向解析 1)编辑主配置文件named.conf [rootmasterdns ~]# vim /var/named/chroot/etc/named.conf zone 1.168.192.in-addr.arpa { type master; file 192.168.1.zone; }; 2)创建反向区域的记录 [rootdns named]# cat /var/named/chroot/var/named/192.168.1.zone $TTL 1D IN SOAuplooking.com. 454452000.qq.com. ( 0; serial 1D; refresh 1H; retry 1W; expire 3H ); minimum NSdns1.uplooking.com. dns1A192.168.122.105 1PTRweb.uplooking.com. 2PTRftp.uplooking.com. 3PTRmail.uplooking.com. [rootdns named]# systemctl restart named [rootdns named]# systemctl restart named-chroot 3)测试 [rootmasterdns ~]# nslookup ftp.uplooking.com Server:192.168.122.166 Address:192.168.122.166#53 Name:ftp.uplooking.com Address: 192.168.1.2 192.168.1.2 Server:192.168.122.166 Address:192.168.122.166#53 2.1.168.192.in-addr.arpaname ftp.uplooking.com. 示例DNS主从服务器部署 环境描述 192.168.122.166DNS主服务器 192.168.122.167DNS从服务器 将主服务器上uplooking.com区域的记录与从服务同步 主服务器 1) 编辑主配置文件named.conf [rootmasterdns ~]# vim /var/named/chroot/etc/named.conf options { directory /var/named; }; zone uplooking.com { type master; allow-transfer { 192.168.122.167; };指定从服务器的IP地址 file uplooking.com.zone; }; zone 1.168.192.in-addr.arpa { type master; file 192.168.1.zone; }; 2)编辑uplooking.com区域的记录文件添加从服务器的NS记录 [rootmasterdns ~]# cat /var/named/chroot/var/named/uplooking.com.zone $TTL 1D IN SOAuplooking.com. cisco_wjc.126.com. ( 0; serial 1D; refresh 1H; retry 1W; expire 3H ); minimum NSdns1.uplooking.com. NSdns2.uplooking.com. dns1A192.168.122.166 dns2A192.168.122.167 webA192.168.1.1 webA192.168.1.4 uplooking.com.A192.168.1.1 *.uplooking.com.A192.168.1.1 ftpA192.168.1.2 MX 5mail.uplooking.com. mailA192.168.1.3 [rootlocalhost named]# systemctl restart named [rootlocalhost named]# systemctl restart named-chroot 从服务器 1) 安装软件 yum install -y bind bind-chroot 编辑主配置文件 [rootslavedns ~]# vim /var/named/chroot/etc/named.conf options { directory /var/named; }; zone uplooking.com { type slave; masters { 192.168.122.166; };指定主服务器IP地址 file slaves/uplooking.com.zone; }; [rootslavedns ~]# 3) 启动named服务 [rootlocalhost ~]# systemctl start named-chroot [rootlocalhost ~]# systemctl start named 测试 [rootslavedns ~]# ls /var/named/chroot/var/named/slaves/ uplooking.com.zone [rootslavedns ~]# [rootslavedns ~]# nslookup server 192.168.122.167 Default server: 192.168.122.167 Address: 192.168.122.167#53 web.uplooking.com Server:192.168.122.167 Address:192.168.122.167#53 Name:web.uplooking.com Address: 192.168.1.4 Name:web.uplooking.com Address: 192.168.1.1 exit 练习 部署DNS服务器完成如下解析 www.a.org 192.168.10.1 bbs.a.org 192.168.10.2 discuz.b.org 192.168.20.1 game.b.org 192.168.20.2 mail.b.org 192.168.20.3 标签named,chroot,部署,root,192.168,uplooking,DNS,服务器,com 来源 https://www.cnblogs.com/huoxc/p/12850813.html
