搭建DNS服務(wù)器

私有云搭建DNS服務(wù)器的方法

1. 服務(wù)器準(zhǔn)備

172.16.23.137 DNS服務(wù)器，      以下簡(jiǎn)稱 server 
172.16.23.139 客戶端測(cè)試服務(wù)器， 以下簡(jiǎn)稱 client

2. 首關(guān)閉防火墻和selinux （兩個(gè)服務(wù)器都操作）

[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# systemctl disable firewalld
[root@localhost ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
[root@localhost ~]# setenforce 0

以下是server服務(wù)器的操作

1. 查看ip

[root@localhost ~]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.16.23.137  netmask 255.255.255.0  broadcast 172.16.23.255
        inet6 fe80::2a6e:d4ff:fe88:c794  prefixlen 64  scopeid 0x20<link>
        ether 28:6e:d4:88:c7:94  txqueuelen 1000  (Ethernet)
        RX packets 7195317  bytes 2342937901 (2.1 GiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 199376  bytes 25216420 (24.0 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

2、DNS服務(wù)端安裝bind包，并設(shè)置開(kāi)機(jī)自啟

[root@DNSserver ~]# yum install -y bind
[root@DNSserver ~]# systemctl start named
[root@DNSserver ~]# systemctl enable named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.
[root@localhost ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2020-12-01 14:06:49 CST; 19h ago
  Process: 233243 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 233260 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 233255 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 233261 (named)
    Tasks: 11
   CGroup: /system.slice/named.service
           └─233261 /usr/sbin/named -u named -c /etc/named.conf

Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './DNSKEY/IN': 2001:500...#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './NS/IN': 2001:500:2d::d#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './DNSKEY/IN': 2001:500...#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './NS/IN': 2001:500:2::c#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './DNSKEY/IN': 2001:500...#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './NS/IN': 2001:500:9f::42#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './DNSKEY/IN': 2001:dc3...#53
Dec 02 09:09:59 localhost.localdomain named[233261]: network unreachable resolving './NS/IN': 2001:dc3::35#53
Dec 02 09:10:09 localhost.localdomain named[233261]: resolver priming query complete
Dec 02 09:10:09 localhost.localdomain named[233261]: managed-keys-zone: Unable to fetch DNSKEY set '.': ti...out

3、在/etc/named.conf文件里面修改全局配置信息

[root@DNSserver ~]# vim /etc/named.conf
..........
options {
        listen-on port 53 { any; };            //中括號(hào)里面講IP地址換成any
        listen-on-v6 port 53 { any; };         //同上
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };              //同上
..........

4、在/etc/named.rfc1912.zones子配置文件里面添加正向和反向的解析區(qū)域

[root@localhost ~]# arpaname 172.16.23.137
137.23.16.172.IN-ADDR.ARPA

## 在文件的最后添加正向和反向的解析文件
[root@DNSserver ~]# vim /etc/named.rfc1912.zones
zone "moyu.com" IN {
        type master;
        file "moyu.zone";
};

zone "23.16.172.in-addr.arpa" IN {
        type master;
        file "172.16.23.arpa";
};

正向：
        zone：代表一個(gè)區(qū)域
        " " ：  雙引號(hào)(英文)里面寫入的是自己域名
        type master ： master 代表是主域名服務(wù)器
        file " "：雙引號(hào)里面寫文件與在 /var/named下創(chuàng)建的文件名相同
反向：
        " "：雙引號(hào)里面寫入的是反ip，例如：0.0.10.id-addr.arpa說(shuō)明反向可以解析10.0.0.X網(wǎng)段的所有IP地址域名解析
        可以使用：arpaname IP 查看自己的服務(wù)器IP的反IP

注釋

5、復(fù)制生成正向和反向區(qū)域解析數(shù)據(jù)庫(kù)文件

[root@DNSserver ~]# cd /var/named/
[root@DNSserver named]# ls
data  dynamic  named.ca  named.empty  named.localhost  named.loopback  slaves
[root@DNSserver named]# cp -a named.localhost moyu.zone
[root@DNSserver named]# cp -a named.loopback 172.16.23.arpa

6、編輯正向區(qū)域解析數(shù)據(jù)庫(kù)文件

[root@DNSserver named]# vim moyu.zone
$TTL 1D
@       IN SOA  moyu.com. root.moyu.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns1.moyu.com.
        A       127.0.0.1
        AAAA    ::1
ns1     A       172.16.23.137
www     A       172.16.23.139
cloud   A       172.16.23.139

7、編輯反向區(qū)域解析數(shù)據(jù)庫(kù)文件

[root@localhost named]# vim 172.16.23.arpa
$TTL 1D
@       IN SOA  moyu.com. root.moyu.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns1.moyu.com.
        A       127.0.0.1
        AAAA    ::1
        PTR     localhost.
ns1     A       172.16.23.137
139     PTR     www.moyu.com
139     PTR     cloud.moyu.com

8、配置文件檢測(cè)

[root@DNSserver ~]# named-checkconf /etc/named.conf
[root@DNSserver ~]# named-checkconf /etc/named.rfc1912.zones
# 回車后，沒(méi)有報(bào)錯(cuò)信息說(shuō)明沒(méi)有錯(cuò)誤

9、正向和反向區(qū)域解析測(cè)試

[root@localhost named]# named-checkzone moyu.com /var/named/moyu.zone
zone moyu.com/IN: loaded serial 0
OK
[root@localhost named]# named-checkzone moyu.com /var/named/172.16.23.arpa 
zone moyu.com/IN: loaded serial 0
OK

10、重啟DNS服務(wù)，查看端口

[root@localhost named]# netstat -tunlp | grep named
tcp        0      0 172.16.23.137:53        0.0.0.0:*               LISTEN      233261/named        
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      233261/named        
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      233261/named        
tcp6       0      0 :::53                   :::*                    LISTEN      233261/named        
tcp6       0      0 ::1:953                 :::*                    LISTEN      233261/named        
udp        0      0 192.168.122.1:53        0.0.0.0:*                           233261/named        
udp        0      0 172.16.23.137:53        0.0.0.0:*                           233261/named        
udp        0      0 127.0.0.1:53            0.0.0.0:*                           233261/named        
udp6       0      0 :::53                   :::*                                233261/named

到這里DNS服務(wù)端搭建完成

以下是client 服務(wù)器的操作

1、查看客戶端主機(jī)的IP（Centos7）

[root@localhost named]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.16.23.139  netmask 255.255.255.0  broadcast 172.16.23.255

2、測(cè)試是否能與服務(wù)器端互通

[root@localhost ~]#  ping -c 3 172.16.23.137
PING 172.16.23.137 (172.16.23.137) 56(84) bytes of data.
64 bytes from 172.16.23.137: icmp_seq=1 ttl=64 time=0.505 ms
64 bytes from 172.16.23.137: icmp_seq=2 ttl=64 time=0.282 ms
64 bytes from 172.16.23.137: icmp_seq=3 ttl=64 time=0.366 ms

--- 172.16.23.137 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.282/0.384/0.505/0.093 ms

3、安裝bind-utils包

[root@localhost ~]# rpm -ql nslookup
package nslookup is not installed
[root@dnsclient ~]# yum install -y bind-utils
[root@localhost ~]# rpm -qa | grep bind-utils
bind-utils-9.11.4-26.P2.el7_9.2.x86_64

4、在客戶端 /etc/resolv.conf 加入服務(wù)端的DNS

[root@dnsclient ~]# vim /etc/resolv.conf
[root@dnsclient ~]# cat /etc/resolv.conf
[root@localhost ~]# cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 172.16.23.137
nameserver 8.8.8.8

5、測(cè)試

[root@localhost ~]# nslookup www.moyu.com
Server:     172.16.23.137
Address:    172.16.23.137#53

Name:   www.moyu.com
Address: 172.16.23.139

[root@localhost ~]# nslookup 172.16.23.139
139.23.16.172.in-addr.arpa  name = cloud.moyu.com.23.16.172.in-addr.arpa.
139.23.16.172.in-addr.arpa  name = www.moyu.com.23.16.172.in-addr.arpa.

完成！

?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成，瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明：文章內(nèi)容（如有圖片或視頻亦包括在內(nèi)）由作者上傳并發(fā)布，文章內(nèi)容僅代表作者本人觀點(diǎn)，簡(jiǎn)書(shū)系信息發(fā)布平臺(tái)，僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

  • 一、簡(jiǎn)介 DNS是域名系統(tǒng)（Domain Name System）的縮寫，是因特網(wǎng)的一項(xiàng)核心服務(wù)，它能提供域...
    指間_流年閱讀 3,226評(píng)論 0贊 2
  • DNS域名解析 DNS（Domain Name System）域名系統(tǒng)，在TCP/IP 網(wǎng)絡(luò)中有非常重要的地位，能...
    女俠留步_4b1c閱讀 1,812評(píng)論 0贊 0
  • 更多精彩文章：銳意翱翔原文鏈接：https://www.teamleader.cn/ubuntu-da-jian-...
    DevThink閱讀 12,932評(píng)論 0贊 8
  • 搭建基礎(chǔ)環(huán)境：Centos7.2 1、安裝最新的bind軟件 #yum install bind* -y 2、修改...
    天夭夭閱讀 1,948評(píng)論 0贊 0
  • 久違的晴天，家長(zhǎng)會(huì)。 家長(zhǎng)大會(huì)開(kāi)好到教室時(shí)，離放學(xué)已經(jīng)沒(méi)多少時(shí)間了。班主任說(shuō)已經(jīng)安排了三個(gè)家長(zhǎng)分享經(jīng)驗(yàn)。 放學(xué)鈴聲...
    飄雪兒5閱讀 7,788評(píng)論 16贊 22

友情鏈接更多精彩內(nèi)容