DNS主從服務(wù)器搭建

參考文檔

http://blog.51cto.com/yichenyang/1911098
http://blog.51cto.com/wubinary/1379595

一、安裝

[root@prod-dns-01 etc]# yum -y install bind
[root@prod-dns-01 etc]# rpm -qa |grep bind
bind-9.9.4-61.el7.x86_64
rpcbind-0.2.0-42.el7.x86_64
bind-libs-9.9.4-61.el7.x86_64
bind-utils-9.9.4-61.el7.x86_64
bind-license-9.9.4-61.el7.noarch
bind-libs-lite-9.9.4-61.el7.x86_64
注意hosts文件 [root@prod-dns-01 etc]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
172.20.3.36 prod-dns-01 prod-dns-01.test.com prod-dns-01.test.net prod-dns-01.test.bo
172.20.3.37 prod-dns-02 prod-dns-02.test.com prod-dns-02.test.net prod-dns-02.test.bo

二、修改主配置

1、named.conf

[root@prod-dns-01 etc]# cat named.conf
options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; };
recursion yes;
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN {
type hint;
file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

2、named.rfc1912.zones

[root@prod-dns-01 etc]# cat /etc/named.rfc1912.zones
zone "test.net" IN {
type master;
file "test.net.zone";
allow-transfer {127.0.0.1;172.20.3.36;172.20.3.37;};
};
zone "test.com" IN {
type master;
file "test.com.zone";
allow-transfer {127.0.0.1;172.20.3.36;172.20.3.37;};
};
zone "test.bo" IN {
type master;
file "test.bo.zone";
allow-transfer {127.0.0.1;172.20.3.36;172.20.3.37;};
};

3、注意權(quán)限

[root@prod-dns-01 named]# ls -lh
total 28K
drwxrwx--- 2 named named 23 Jun 8 13:45 data
drwxrwx--- 2 named named 31 Jun 8 13:56 dynamic
-rw-r----- 1 root named 2.3K May 22 2017 named.ca
-rw-r----- 1 root named 152 Dec 15 2009 named.empty
-rw-r----- 1 root named 152 Jun 21 2007 named.localhost
-rw-r----- 1 root named 168 Dec 15 2009 named.loopback
-rw-r----- 1 root named 848 Jun 8 14:04 test.bo.zone
-rw-r----- 1 root named 850 Jun 8 14:04 test.com.zone
-rw-r----- 1 root named 850 Jun 8 14:04 test.net.zone

4、檢測(cè)配置 $TTL為定義的宏，表示下面資源記錄ttl的值都為300秒 @符號(hào)可代表區(qū)域文件/etc/named.conf里面定義的區(qū)域名稱，即："test.net."。

每個(gè)區(qū)域的資源記錄第一條必須是SOA，SOA后面接DNS服務(wù)器的域名和電子郵箱地址，此處電子郵箱地址里的@因?yàn)橛刑厥庥猛?，所以此處要用點(diǎn)號(hào)代替。SOA后面小括號(hào)里的各值所代表的意義如下所示： IN SOA prod-dns-01.test.net admin.test.net (
1806081510 ;標(biāo)識(shí)序列號(hào)，十進(jìn)制數(shù)字，不能超過10位，通常使用日期，年月日時(shí)分，代表18年6月8號(hào)15點(diǎn)10分修改記錄 10M;新時(shí)間，即每隔多久到主服務(wù)器檢查一次，此處為10分鐘 5M ;重試時(shí)間，應(yīng)該小于刷新時(shí)間，此處為5分鐘 1D ;過期時(shí)間，此處為1天 2D ;主服務(wù)器掛后，從服務(wù)器至多工作的時(shí)間，此處為2天)

[root@prod-dns-01 named]# named-checkzone "test.net.zone" /var/named/test.net.zone
zone test.net.zone/IN: loaded serial 1806081010
OK

5、添加新A記錄

[root@prod-dns-01 named]# vim test.com.zone
[root@prod-dns-01 named]# vim test.bo.zone
[root@prod-dns-01 named]# vim test.net.zone
[root@prod-dns-01 etc]# cat /var/named/test.net.zone
$TTL 300
;
@ IN SOA prod-dns-01.test.net admin.test.net (
1806081550 ; Serial
10M ; Refresh
5M ; Retry
1D ; Expire
2D ; TTL
)
;
IN NS dns1
IN NS dns2
dns1 IN A 172.20.3.36
dns2 IN A 172.20.3.37
;
;
prod-hadoop-master-01 IN A 172.20.3.4
prod-hadoop-master-02 IN A 172.20.3.5
prod-hadoop-data-01 IN A 172.20.3.6
prod-hadoop-data-02 IN A 172.20.3.7
prod-hadoop-data-03 IN A 172.20.3.8
prod-hadoop-data-04 IN A 172.20.3.9
prod-hadoop-data-05 IN A 172.20.3.10
prod-hadoop-data-06 IN A 172.20.3.11
prod-hadoop-data-07 IN A 172.20.3.12
prod-hadoop-data-08 IN A 172.20.3.13

6、配置生效

[root@prod-dns-01 named]# rndc reload
server reload successful

三、測(cè)試

[root@prod-hadoop-master-01 ~]# dig -t A prod-hadoop-data-01.test.com @172.20.3.36
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4 <<>> -t A prod-hadoop-data-01.test.com @172.20.3.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39022
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;prod-hadoop-data-01.test.com. IN A
;; ANSWER SECTION:
prod-hadoop-data-01.test.com. 300 IN A 172.20.3.6
;; AUTHORITY SECTION:
test.com. 300 IN NS dns2.test.com.
test.com. 300 IN NS dns1.test.com.
;; ADDITIONAL SECTION:
dns1.test.com. 300 IN A 172.20.3.36
dns2.test.com. 300 IN A 172.20.3.37
;; Query time: 1 msec
;; SERVER: 172.20.3.36#53(172.20.3.36)
;; WHEN: Fri Jun 8 14:05:36 2018
;; MSG SIZE rcvd: 133

四、主從同步

1、dns 從主配置

[root@prod-dns-02 etc]# cat /etc/named.conf
[root@prod-dns-02 etc]# cat /etc/named.rfc1912.zones
zone "test.net" IN {
type slave;
masters { 172.20.3.36; };
file "slaves/test.net.zone";
allow-transfer { none; };
};
zone "test.com" IN {
type slave;
masters { 172.20.3.36; };
file "slaves/test.com.zone";
allow-transfer { none; };
};
zone "test.bo" IN {
type slave;
masters { 172.20.3.36; };
file "slaves/test.bo.zone";
allow-transfer { none; };
};

2、啟動(dòng)dns從配置會(huì)同步主的zone文件

[root@prod-dns-02 etc]# ls -ls /var/named/slaves/
[root@prod-dns-02 etc]# systemctl start named.service
[root@prod-dns-02 etc]# systemctl status named.service
[root@prod-dns-02 etc]# ls /var/named/slaves/
test.bo.zone test.com.zone test.net.zone

3、測(cè)試dns從的解析

[root@prod-hadoop-master-01 ~]# dig -t A prod-hadoop-data-01.test.com @172.20.3.37
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4 <<>> -t A prod-hadoop-data-01.test.com @172.20.3.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6112
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;prod-hadoop-data-01.test.com. IN A
;; ANSWER SECTION:
prod-hadoop-data-01.test.com. 300 IN A 172.20.3.6
;; AUTHORITY SECTION:
test.com. 300 IN NS dns1.test.com.
test.com. 300 IN NS dns2.test.com.
;; ADDITIONAL SECTION:
dns1.test.com. 300 IN A 172.20.3.36
dns2.test.com. 300 IN A 172.20.3.37
;; Query time: 3 msec
;; SERVER: 172.20.3.37#53(172.20.3.37)
;; WHEN: Fri Jun 8 14:35:03 2018
;; MSG SIZE rcvd: 133

五、服務(wù)開機(jī)啟動(dòng)

[root@prod-dns-01 etc]# systemctl enable named
Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
[root@prod-dns-02 etc]# systemctl enable named
Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.

六、壓力測(cè)試

[root@prod-dns-01 ~]# wget https://www.isc.org/downloads/file/bind-9-9-12/?version=tar-gz
[root@prod-dns-01 ~]# tar zxvf index.html?version=tar-gz
[root@prod-dns-01 queryperf]# cd bind-9.9.12/contrib/queryperf/
[root@prod-dns-01 queryperf]# ./configure
[root@prod-dns-01 queryperf]# make
使用300萬書記，qps每秒達(dá)到1萬以上 [root@prod-dns-01 queryperf]# ./queryperf -d testname.txt -s 172.20.3.37
DNS Query Performance Testing Tool
Version: Id: queryperf.c,v 1.12 2007/09/05 07:36:04 marka Exp
[Status] Processing input data
[Status] Sending queries (beginning with 172.20.3.37)
[Status] Testing complete
Statistics:
Parse input file: once
Ended due to: reaching end of file
Queries sent: 3034641 queries
Queries completed: 3034641 queries
Queries lost: 0 queries
Queries delayed(?): 0 queries
RTT max: 0.028393 sec
RTT min: 0.000110 sec
RTT average: 0.001711 sec
RTT std deviation: 0.001989 sec
RTT out of range: 0 queries
Percentage completed: 100.00%
Percentage lost: 0.00%
Started at: Fri Jun 8 15:28:33 2018
Finished at: Fri Jun 8 15:33:10 2018
Ran for: 276.930575 seconds
Queries per second: 10958.129127 qps

最后編輯于 ：
?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成，瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明：文章內(nèi)容（如有圖片或視頻亦包括在內(nèi)）由作者上傳并發(fā)布，文章內(nèi)容僅代表作者本人觀點(diǎn)，簡(jiǎn)書系信息發(fā)布平臺(tái)，僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

  • 1. 概述 在網(wǎng)絡(luò)環(huán)境中一般用戶只需要在瀏覽器中輸入url如www.sunny.com就可以到對(duì)應(yīng)服務(wù)器獲取相應(yīng)的...
    ghbsunny閱讀 3,422評(píng)論 0贊 7
  • 一、BIND是什么 BIND是互聯(lián)網(wǎng)應(yīng)用最為廣泛的DNS軟件。 二、BIND的安裝與使用 以下內(nèi)容轉(zhuǎn)自 http:...
    0_0啊閱讀 3,349評(píng)論 0贊 0
  • NAME dnsmasq - A lightweight DHCP and caching DNS server....
    ximitc閱讀 2,995評(píng)論 0贊 0
  • 一、實(shí)現(xiàn)從根，com,rj.com 模擬互聯(lián)網(wǎng)的DNS架構(gòu) DNS（Domain Name System，域名系統(tǒng)...
    ssjinyao閱讀 1,625評(píng)論 0贊 7
  • laravel5.3富文本編輯器u-editor使用方法 項(xiàng)目地址：stevenyangecho/laravel-...
    kaibiao123閱讀 4,682評(píng)論 3贊 0

友情鏈接更多精彩內(nèi)容