Linux下的主辅DNS服务器同步

Posted jks212454

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Linux下的主辅DNS服务器同步相关的知识,希望对你有一定的参考价值。

一、系统环境介绍

系统:rhel8.0
control:192.168.200.150 -》主DNS(已配置)
node1:192.168.200.135 -》辅助DNS
node2:192.168.200.136

二、辅助DNS搭建

1.安装yum包

[root@node1 ~]# yum -y install bind bind-chroot
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
Repository AppStream is listed more than once in the configuration
Repository BaseOS is listed more than once in the configuration
AppStream                                                                                                      165 kB/s | 3.2 kB     00:00    
BaseOS                                                                                                         155 kB/s | 2.7 kB     00:00    
ansiable                                                                                                       0.0  B/s |   0  B     00:00    
Zabbix                                                                                                         1.3 kB/s | 2.9 kB     00:02    
Failed to synchronize cache for repo 'ansiable', ignoring this repo.
Dependencies resolved.
===============================================================================================================================================
 Package                          Arch                        Version                                     Repository                      Size
===============================================================================================================================================
Installing:
 bind                             x86_64                      32:9.11.4-16.P2.el8                         AppStream                      2.1 M
 bind-chroot                      x86_64                      32:9.11.4-16.P2.el8                         AppStream                       99 k

Transaction Summary
===============================================================================================================================================
Install  2 Packages

Total size: 2.2 M
Installed size: 4.7 M
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                       1/1 
  Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Installing       : bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Running scriptlet: bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Installing       : bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
  Running scriptlet: bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
  Verifying        : bind-32:9.11.4-16.P2.el8.x86_64                                                                                       1/2 
  Verifying        : bind-chroot-32:9.11.4-16.P2.el8.x86_64                                                                                2/2 
Installed products updated.

Installed:
  bind-32:9.11.4-16.P2.el8.x86_64                                    bind-chroot-32:9.11.4-16.P2.el8.x86_64                                   

Complete!

2.设置服务自启

[root@node1 ~]# systemctl enable --now named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.

3.编辑dns主配置文件

[root@node1 ~]# vim /etc/named.conf 

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };


4.编辑区域文件

[root@node1 ~]# vim /etc/named.rfc1912.zones
zone "huaxia.com" IN {
        type slave;
        masters { 192.168.200.150; };
        file "slaves/named.zx";
};



zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "200.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.200.150; };
        file "slaves/named.fx";
};

5.配置正向文件

[root@node1 named]# cp -p named.localhost slaves/named.zx
[root@node1 named]# cp -p named.loopback slaves/named.fx

$TTL 1D
@       IN SOA  ns.huaxia.com. root. (
                                        20212401        ; serial
                                        10      ; refresh
                                        1H      ; retry
                                        10      ; expire
                                        10 )    ; minimum
@       NS      ns.huaxia.com.
ns IN   A       192.168.200.150
server0  IN A 192.168.200.150
~                              

备注:,正向、反向数据库文件主辅同步时间频率改为 10 秒,增加序列号,为方便快速看到同步效果,并且重启 named 服务。(生产环境中保持默认即可。)

6.配置反向文件

$TTL 1D
@       IN SOA  ns.huaxia.com. root. (
                                        20212413       ; serial
                                        10      ; refresh
                                        10      ; retry
                                        1W      ; expire
                                        10 )    ; minimum
@       NS      ns.huaxia.com
ns IN   A       192.168.200.150
150     PTR     server0.example.com

7.重启服务和放行防火墙

[root@node1 named]# systemctl restart named
[root@node1 named]# firewall-cmd --permanent --add-service=dns
success
[root@node1 named]# firewall-cmd --reload 
success

三、客户端指向DNS服务器

[root@node2 ~]# vim /etc/resolv.conf 

# Generated by NetworkManager
search example.com ilt.example
nameserver 192.168.200.135

四、测试正向解析和反向解析

[root@node2 ~]# nslookup 
> server0.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	server0.huaxia.com
Address: 192.168.200.150
> 192.168.200.150
150.200.168.192.in-addr.arpa	name = www.huaxia.com.

六、测试主从同步

1.修改主DNS的正、反向配置文件

$TTL 1D
@       IN SOA   ns.huaxia.com. root.  (
                                   2021062211           ; serial
                                        10      ; refresh
                                        10      ; retry
                                        1W      ; expire
                                        30 )    ; minimum
@        IN      NS      ns.huaxia.com.
ns      IN      A       192.168.200.150
server0       IN      A       192.168.200.150
www IN A 192.168.200.150
web IN CNAME web.huaxia.com.
* IN A 192.168.200.150
mail IN A 192.168.200.150
@ MX 10 mail.huaxia.com.


$TTL 1D
@       IN SOA    ns  root.huaxia.com  (
                                   2021062211           ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum

@       IN     NS      ns.huaxia.com.
ns      IN      A       192.168.200.150
150           PTR      www.huaxia.com.
150     PTR   mail.huaxia.com.
150 PTR server0.example.com.

2.客户端检查是否dns同步

150.200.168.192.in-addr.arpa	name = server0.example.com.
150.200.168.192.in-addr.arpa	name = www.huaxia.com.
150.200.168.192.in-addr.arpa	name = mail.huaxia.com.

[root@node2 ~]# nslookup server0.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	server0.huaxia.com
Address: 192.168.200.150

[root@node2 ~]# nslookup www.huaxia.com
Server:		192.168.200.135
Address:	192.168.200.135#53

Name:	www.huaxia.com
Address: 192.168.200.150


七、主DNS服务器搭建链接

Linux下的DNS服务器搭建

以上是关于Linux下的主辅DNS服务器同步的主要内容,如果未能解决你的问题,请参考以下文章

DNS的主从架构子域委派转发器

DNS主从复制及子域

Linux运维实战之DNS(bind)服务器的安装与配置

Linux下的DNS服务器搭建

linux下的DNS服务器部署(详细)

linux 搭建 DNS 主从同步