1、主DNS服务器部署
1.1、配置yum源
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
setenforce 0
cd /etc/yum.repos.d/
mkdir backup
mv CentOS-* backup/
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum clean all && yum makecache
1.2、安装dns
yum install -y bind bind-utils
1.3、配置主DNS服务器
vim /etc/named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
allow-query { any; };
allow-transfer { 192.168.52.17; }; # 从服务器IP
recursion yes;
allow-recursion { any; }; # 新增
};
配置正向解析
zone "westos1.com" IN {
type master;
file "westos1.com.zone";
allow-transfer { 192.168.52.17; };
allow-update { none; };
};
配置反向解析
zone "52.168.192.in-addr.arpa" IN {
type master;
file "192.168.52.zone";
allow-transfer { 192.168.52.17; };
};
cd /var/named
cp named.empty westos1.com.zone
cp named.empty 192.168.52.zone
chown -R named.named 192.168.52.zone westos1.com.zone # 新增
vi westos1.com.zone
$TTL 3H
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS dns.westos1.com.
dns IN A 192.168.52.15
www IN A 192.168.52.15
vi 192.168.52.zone
$TTL 3H
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS dns.westos1.com.
15 IN PTR dns.westos1.com.
15 IN PTR www.westos1.com.
1.4、检查反向区域
named-checkzone westos1.com /var/named/westos1.com.zone
named-checkzone 52.168.192.in-addr.arpa /var/named/192.168.52.zone
1.5、启动named
systemctl restart named
systemctl enable named
systemctl status named
1.6、防火墙放行dns流量
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload
2、 从DNS服务器部署
2.1、配置yum源
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
setenforce 0
cd /etc/yum.repos.d/
mkdir backup
mv CentOS-* backup/
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo
yum clean all && yum makecache
2.2、安装dns
yum install -y bind bind-utils
2.3、配置从DNS服务器
vi /etc/named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
allow-transfer { none; };
recursion yes;
allow-recursion { any; };
};
zone "westos1.com" IN {
type slave;
file "westos1.com.zone";
masters { 192.168.52.15; };
allow-update { none; }; # 新增
};
cd /var/named
cp named.empty westos1.com.zone
chown -R named.named westos1.com.zone # 新增
vi westos1.com.zone
$TTL 3H
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS westos1.com.
dns IN A 192.168.52.15
www IN A 192.168.52.15
2.4、启动named
systemctl restart named
systemctl enable named
systemctl status named
2.5、防火墙放行dns流量
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload
3、 dns验证
dig -t A www.westos1.com @192.168.52.15