DNS解析综合学习案例

Posted 2022-07-30 fengling1998

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了DNS解析综合学习案例相关的知识，希望对你有一定的参考价值。

一、web服务器

1、创建磁盘

[root@localhost ~]# fdisk -l
Disk /dev/sda: 42.9 GB, 42949672960 bytes, 83886080 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x00091554

Device Boot Start End Blocks Id System
/dev/sda1 * 2048 1026047 512000 83 Linux
/dev/sda2 1026048 83886079 41430016 8e Linux LVM

Disk /dev/sdb: 21.5 GB, 21474836480 bytes, 41943040 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk /dev/sdc: 21.5 GB, 21474836480 bytes, 41943040 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk /dev/sdd: 21.5 GB, 21474836480 bytes, 41943040 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk /dev/mapper/centos-root: 40.2 GB, 40227569664 bytes, 78569472 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk /dev/mapper/centos-swap: 2147 MB, 2147483648 bytes, 4194304 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes

[root@localhost ~]# fdisk /dev/sdb
Welcome to fdisk (util-linux 2.23.2).

Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Device does not contain a recognized partition table
Building a new DOS disklabel with disk identifier 0x8f8e5a63.

Command (m for help): n
Partition type:
p primary (0 primary, 0 extended, 4 free)
e extended
Select (default p): p
Partition number (1-4, default 1):
First sector (2048-41943039, default 2048):
Using default value 2048
Last sector, +sectors or +sizeK,M,G (2048-41943039, default 41943039):
Using default value 41943039
Partition 1 of type Linux and of size 20 GiB is set

Command (m for help): w
The partition table has been altered!

Calling ioctl() to re-read partition table.
Syncing disks.
[root@localhost ~]# fdisk /dev/sdc
Welcome to fdisk (util-linux 2.23.2).

Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Device does not contain a recognized partition table
Building a new DOS disklabel with disk identifier 0xf373c35d.

Command (m for help): w
The partition table has been altered!

Calling ioctl() to re-read partition table.
Syncing disks.
[root@localhost ~]# fdisk /dev/sdd
Welcome to fdisk (util-linux 2.23.2).

Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

Device does not contain a recognized partition table
Building a new DOS disklabel with disk identifier 0xc466a0fe.

Command (m for help): w
The partition table has been altered!

Calling ioctl() to re-read partition table.
Syncing disks.
[root@localhost ~]# partprobe /dev/sdb
[root@localhost ~]# partprobe /dev/sdc
[root@localhost ~]# partprobe /dev/sdd

2、安装软Riad工具mdadm，创建ride5

[root@localhost ~]# yum -y install mdadm #安装md5dm
[root@localhost ~]# mdadm -C /dev/md5 -l 5 -n 3 /dev/sdb1 /dev/sdc1 /dev/sdd1 #创建ride5
mdadm: Defaulting to version 1.2 metadata
mdadm: array /dev/md5 started.

3、建立逻辑卷，格式化

[root@localhost ~]# pvcreate -y /dev/md5 #创建物理卷
Physical volume "/dev/md5" successfully created
[root@localhost ~]# vgcreate -y myvg /dev/md5 #创建卷组
Volume group "myvg" successfully created
[root@localhost ~]# lvcreate -y -L 35G -n mylv myvg #创建逻辑卷
Logical volume "mylv" created.
[root@localhost ~]# mkfs.xfs /dev/myvg/mylv #格式化卷组
log stripe unit (524288 bytes) is too large (maximum is 256KiB)
log stripe unit adjusted to 32KiB
meta-data=/dev/myvg/mylv isize=256 agcount=16, agsize=573312 blks
= sectsz=512 attr=2, projid32bit=1
= crc=0 finobt=0
data = bsize=4096 blocks=9172992, imaxpct=25
= sunit=128 swidth=256 blks
naming =version 2 bsize=4096 ascii-ci=0 ftype=0
log =internal log bsize=4096 blocks=4480, version=2
= sectsz=512 sunit=8 blks, lazy-count=1
realtime =none extsz=4096 blocks=0, rtextents=0

4、安装httpd

[root@localhost ~]# yum -y install gcc gcc-c++ make #安装编译软件
已加载插件：fastestmirror
Loading mirror speeds from cached hostfile
软件包 gcc-4.8.3-9.el7.x86_64 已安装并且是最新版本
软件包 gcc-c++-4.8.3-9.el7.x86_64 已安装并且是最新版本
软件包 1:make-3.82-21.el7.x86_64 已安装并且是最新版本
无须任何处理

[root@localhost ~]# cd /usr/src/httpd-2.2.17/
[root@localhost httpd-2.2.17]#./configure --prefix=/usr/local/httpd #指定安装位置
[root@localhost httpd-2.2.17]# make && make install #编译安装
[root@localhost ~]# vim /usr/local/httpd/conf/httpd.conf #修改配置文件
[root@localhost ~]# /usr/local/httpd/bin/apachectl start #开启服务
httpd (pid 3915) already running

5、挂载硬盘开启配额

[root@localhost ~]# echo "/dev/myvg/mylv /usr/local/httpd/htdocs/ xfs defaults,usrquota 0 0" >> /etc/fstab #修改配置文件
[root@localhost ~]# tail -1 /etc/fstab
/dev/myvg/mylv /usr/local/httpd/htdocs/ xfs defaults,usrquota 0 0
[root@localhost ~]# mount -a #挂载
[root@localhost ~]# mount | tail -1
/dev/mapper/myvg-mylv on /usr/local/httpd/htdocs type xfs (rw,relatime,seclabel,attr2,inode64,sunit=1024,swidth=2048,usrquota)

6、配额并测试

配额
[root@localhost ~]# useradd web #创建web用户
[root@localhost ~]# yum -y install quota #安装配额工具
[root@localhost ~]# /usr/sbin/quotacheck -auvg
quotacheck: Skipping /dev/mapper/myvg-mylv [/usr/local/httpd/htdocs]
quotacheck: Cannot find filesystem to check or filesystem not mounted with quota option.
==================
[root@localhost ~]# quotaon -auvg
[root@localhost ~]# edquota -u web

Disk quotas for user web (uid 1000):
Filesystem blocks soft hard inodes soft hard
/dev/mapper/myvg-mylv 0 80000 100000 0 80 100

[root@localhost ~]# su web
[web@localhost htdocs]$ dd if=/dev/zero of=/usr/local/httpd/htdocs/aa bs=1M count=101
dd: error writing ‘/usr/local/httpd/htdocs/aa’: Disk quota exceeded
98+0 records in
97+0 records out
102400000 bytes (102 MB) copied, 1.2308 s, 83.2 MB/s
[web@localhost htdocs]$ touch 1..102
touch: cannot touch ‘101’: Disk quota exceeded
touch: cannot touch ‘102’: Disk quota exceeded
[web@localhost htdocs]$ ls
1 11 14 17 2 22 25 28 30 33 36 39 41 44 47 5 52 55 58 60 63 66 69 71 74 77 8 82 85 88 90 93 96 99
10 12 15 18 20 23 26 29 31 34 37 4 42 45 48 50 53 56 59 61 64 67 7 72 75 78 80 83 86 89 91 94 97 index.html
100 13 16 19 21 24 27 3 32 35 38 40 43 46 49 51 54 57 6 62 65 68 70 73 76 79 81 84 87 9 92 95 98

7、创建网页文件

[root@localhost ~]# cd /usr/local/httpd/htdocs/
[root@localhost htdocs]# vim index.html
wangbaoxin haohaohaohao

8、开启80端口并测试

[root@localhost ~]# firewall-cmd --zone=public --add-port=80/tcp --permanent
success

技术图片

二、主DNS服务器配置

[root@ns1 ~]# vim /etc/resolv.conf
# Generated by NetworkManager
search study.com.
nameserver 114.114.114.114
~
[root@ns1 ~]# vim /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.148.111 ns1.study.com.
192.168.148.112 ns2.study.com.

[root@localhost ~]# yum -y install bind
主配置文件
[root@localhost ~]# vim /etc/named.conf
options
directory "/var/named";
allow-query any; ;
forwarders 114.114.114.114; ;

recursion yes;
;

zone "study.com" IN
type master;
file "study.com.zone";
allow-transfer 192.168.148.112; ;
;

zone "148.168.192.in-addr.arpa" IN
type master;
file "192.168.148.arpa";
allow-transfer 192.168.148.112; ;
;

zone "." IN
type hint;
file "named.ca";
;

正向配置文件
[root@ns1 ~]# vim /var/named/study.com.zone
$TTL 1D
@ IN SOA study.com. mail.study.com. (
20190817
3H
20M
1W
1D
)

IN NS ns1.study.com.
IN NS ns2.study.com.
IN MX 10 mail.study.com.
ns1 IN A 192.168.148.111
ns2 IN A 192.168.148.112
www IN A 192.168.148.113
反向配置文件
[root@ns1 ~]# vim /var/named/192.168.148.arpa
$TTL 1D
@ IN SOA study.com. mail.study.com. (
20190817
3H
20M
1W
1D
)

IN NS ns1.study.com.
IN NS ns2.study.com.
IN MX 10 mail.study.com.
111 IN PTR ns1.study.com.
112 IN PTR ns2.study.com.
113 IN PTR www.study.com.

权限
[root@ns1 ~]# chown :named /var/named/study.com.zone /var/named/192.168.148.arpa
[root@ns1 ~]# ll /var/named/
总用量 24
-rw-r--r--. 1 root named 251 8月 15 00:01 192.168.148.arpa
drwxrwx---. 2 named named 6 3月 6 2015 data
drwxrwx---. 2 named named 6 3月 6 2015 dynamic
-rw-r-----. 1 root named 2076 1月 28 2013 named.ca
-rw-r-----. 1 root named 152 12月 15 2009 named.empty
-rw-r-----. 1 root named 152 6月 21 2007 named.localhost
-rw-r-----. 1 root named 168 12月 15 2009 named.loopback
drwxrwx---. 2 named named 6 3月 6 2015 slaves
-rw-r--r--. 1 root named 248 8月 14 23:58 study.com.zone

验证
[root@ns1 ~]# named-checkconf /etc/named.conf
[root@ns1 ~]# named-checkzone study.com /var/named/study.com.zone
zone study.com/IN: study.com/MX ‘mail.study.com‘ has no address records (A or AAAA)
zone study.com/IN: loaded serial 20190817
OK
[root@ns1 ~]# named-checkzone 148.168.192.in-addr.arpa /var/named/192.168.148.arpa
zone 148.168.192.in-addr.arpa/IN: loaded serial 20190817
OK

开启对应防火墙端口
[root@ns1 ~]# firewall-cmd --zone=public --add-port=53/tcp --permanent
success
[root@ns1 ~]# firewall-cmd --zone=public --add-port=53/udp --permanent
success
开启服务
[root@ns1 ~]# systemctl restart firewalld
[root@ns1 ~]# systemctl restart named

三、从DNS服务器配置

从DNS服务器
[root@ns2 ~]# vim /etc/resolv.conf

# Generated by NetworkManager
search study.com.
nameserver 114.114.114.114
------
[root@ns2 ~]# vim /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.148.111 ns1.study.com.
192.168.148.112 ns2.study.com.
-----
[root@localhost ~]# scp 192.168.148.111:/etc/named.conf /etc/named.conf
root@192.168.148.111‘s password:
named.conf 100% 388 0.4KB/s 00:00
[root@ns2 ~]# vim /etc/named.conf

options
directory "/var/named";
;

zone "study.com" IN
type slave;
file "slaves/study.com.zone";
masters 192.168.148.111; ;
;

zone "148.168.192.in-addr.arpa" IN
type slave;
file "dlaves/192.168.148.arpa";
masters 192.168.148.111; ;
;
----------------
[root@ns2 ~]# /sbin/iptables -I INPUT -p tcp --dport 53 -j ACCEPT
[root@ns2 ~]# /sbin/iptables -I INPUT -p udp --dport 53 -j ACCEPT
[root@ns2 ~]# /etc/init.d/iptables save
iptables：将防火墙规则保存到 /etc/sysconfig/iptables： [确定]
[root@ns2 ~]# /etc/init.d/iptables restart
iptables：将链设置为政策 ACCEPT：filter [确定]
iptables：清除防火墙规则： [确定]
iptables：正在卸载模块： [确定]
iptables：应用防火墙规则： [确定]
[root@ns2 ~]#
[root@ns2 ~]# /etc/init.d/named restart
停止 named： [确定]
启动 named： [确定]

四、测试机测试

[root@ceshi ~]# nslookup www.study.com
Server: 192.168.148.111
Address: 192.168.148.111#53

Name: www.study.com
Address: 192.168.148.113

[root@ceshi ~]# nslookup ns1.study.com
Server: 192.168.148.111
Address: 192.168.148.111#53

Name: ns1.study.com
Address: 192.168.148.111

[root@ceshi ~]# nslookup 192.168.148.111
Server: 192.168.148.111
Address: 192.168.148.111#53

111.148.168.192.in-addr.arpa name = ns1.study.com.

[root@ceshi ~]# nslookup www.jd.com
Server: 192.168.148.111
Address: 192.168.148.111#53

Non-authoritative answer:
www.jd.com canonical name = www.jd.com.gslb.qianxun.com.
www.jd.com.gslb.qianxun.com canonical name = www.jdcdn.com.
Name: www.jdcdn.com
Address: 150.138.120.1

[root@ceshi ~]# nslookup www.study.com 192.168.148.112
Server: 192.168.148.112
Address: 192.168.148.112#53

Name: www.study.com
Address: 192.168.148.113

[root@ceshi ~]# nslookup ns1.study.com 192.168.148.112
Server: 192.168.148.112
Address: 192.168.148.112#53

Name: ns1.study.com
Address: 192.168.148.111

[root@ceshi ~]# nslookup 192.168.148.111 192.168.148.112
Server: 192.168.148.112
Address: 192.168.148.112#53

111.148.168.192.in-addr.arpa name = ns1.study.com.

[root@ceshi ~]# lynx www.study.com
[root@ceshi ~]# lynx www.jd.com

技术图片