当前位置: 移动技术网 > 科技>操作系统>Linux > Linux DNS 主从复制

Linux DNS 主从复制

2019年10月08日  | 移动技术网科技  | 我要评论

慢摇舞曲下载,谁能百里挑一姜方舟,超级中国第五集

centos-logo

设置主从dns的主要是为了冗余,分担压力,防止服务器宕机后,dns无法正常解析。


配置 master

正常配置dns服务。

设置主机名

[root@localhost ~]# hostnamectl set-hostname master
[root@localhost ~]# bash

安装 bind 包

[root@master ~]# yum install bind bind-utils -y

编辑主配置文件

[root@master ~]# vim /etc/named.conf
  • 配置监听网段、允许查询网段
listen-on port 53 { 192.168.28.128; };
allow-query     { any; };

编辑区域配置文件

[root@master ~]# vim /etc/named.rfc1912.zones
zone "yun.com" in {
        type master;
        file "yun.com.zone";
        allow-update { none; };
};

zone "100.168.192.in-addr.arpa" in {
        type master;
        file "100.168.192.zone";
        allow-update { none; };
};

编辑区域数据配置文件

[root@master ~]# cd /var/named/
  • 编辑正向区域数据文件
[root@master named]# cp -p named.localhost yun.com.zone
[root@master named]# vim yun.com.zone
$ttl 1d
@   in soa  yun.com admin.yun.com. (
                    0   ; serial
                    1d  ; refresh
                    1h  ; retry
                    1w  ; expire
                    3h )    ; minimum
    in  ns  yun.com.
    in  a   192.168.28.128
    in  mx 10   mail.yun.com.
www in  a   192.168.100.10
ftp in  a   192.168.100.20
bbs in  cname   www
*   in  a   8.8.8.8
  • 编辑反向区域数据文件
[root@master named]# cp -p yun.com.zone 100.168.192.zone
[root@master named]# vim 100.168.192.zone
$ttl 1d
@       in soa  yun.com admin.yun.com. (
                                        0       ; serial
                                        1d      ; refresh
                                        1h      ; retry
                                        1w      ; expire
                                        3h )    ; minimum
        in      ns      yun.com.
        in      a       192.168.28.128
10      in      ptr     www.yun.com.
20      in      ptr     ftp.yun.com.

启动服务

[root@master ~]# systemctl start named
[root@master ~]# systemctl enable named
created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
[root@master ~]# netstat -ntuap | grep named
tcp        0      0 192.168.28.128:53       0.0.0.0:*               listen      34822/named         
tcp        0      0 127.0.0.1:953           0.0.0.0:*               listen      34822/named         
tcp6       0      0 ::1:53                  :::*                    listen      34822/named         
tcp6       0      0 ::1:953                 :::*                    listen      34822/named         
udp        0      0 192.168.28.128:53       0.0.0.0:*                           34822/named         
udp6       0      0 ::1:53                  :::*                                34822/named         

关闭防火墙

[root@master ~]# systemctl stop firewalld
[root@master ~]# setenforce 0

nslookup

  • 设置dns地址
[root@master ~]# vim /etc/resolv.conf
# generated by networkmanager
search localdomain
nameserver 192.168.28.128
  • 正向查询
[root@master ~]# nslookup www.yun.com
server:     192.168.28.128
address:    192.168.28.128#53

name:   www.yun.com
address: 192.168.100.10

[root@master ~]# nslookup ftp.yun.com
server:     192.168.28.128
address:    192.168.28.128#53

name:   ftp.yun.com
address: 192.168.100.20

[root@master ~]# nslookup bbs.yun.com
server:     192.168.28.128
address:    192.168.28.128#53

bbs.yun.com canonical name = www.yun.com.
name:   www.yun.com
address: 192.168.100.10

[root@master ~]# nslookup asd.yun.com
server:     192.168.28.128
address:    192.168.28.128#53

name:   asd.yun.com
address: 8.8.8.8
  • 反向查询
[root@master ~]# nslookup 192.168.100.10
server:     192.168.28.128
address:    192.168.28.128#53

10.100.168.192.in-addr.arpa name = www.yun.com.

[root@master ~]# nslookup 192.168.100.20
server:     192.168.28.128
address:    192.168.28.128#53

20.100.168.192.in-addr.arpa name = ftp.yun.com.

allow-transfer

这是最重要的一步,允许传送。配置好后重启服务。

[root@master ~]# vim /etc/named.rfc1912.zones
zone "yun.com" in {
        type master;
        file "yun.com.zone";
        allow-transfer { 192.168.28.129; };
        allow-update { none; };
};

zone "100.168.192.in-addr.arpa" in {
        type master;
        file "100.168.192.zone";
        allow-transfer { 192.168.28.129; };
        allow-update { none; };
};

配置 slave

设置主机名

[root@localhost ~]# hostnamectl set-hostname slave
[root@localhost ~]# bash

安装 bind 包

[root@slave ~]# yum install bind bind-utils -y

编辑主配置文件

[root@slave ~]# vim /etc/named.conf
  • 配置监听网段、允许查询网段
listen-on port 53 { 192.168.28.129; };
allow-query     { any; };

编辑区域配置文件

[root@slave ~]# vim /etc/named.rfc1912.zones
zone "yun.com" in {
        type slave;
        file "slaves/yun.com.zone";
        masters { 192.168.28.128; };
        allow-update { none; };
};

zone "100.168.192.in-addr.arpa" in {
        type slave;
        file "slaves/100.168.192.zone";
        masters { 192.168.28.128; };
        allow-update { none; };
};

启动服务

[root@slave ~]# systemctl start named
[root@slave ~]# systemctl enable named
created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
[root@slave ~]# netstat -ntuap | grep named
tcp        0      0 192.168.28.129:53       0.0.0.0:*               listen      1661/named          
tcp        0      0 127.0.0.1:953           0.0.0.0:*               listen      1661/named          
tcp6       0      0 ::1:53                  :::*                    listen      1661/named          
tcp6       0      0 ::1:953                 :::*                    listen      1661/named          
udp        0      0 192.168.28.129:53       0.0.0.0:*                           1661/named          
udp6       0      0 ::1:53                  :::*                                1661/named          

关闭防火墙

[root@slave ~]# systemctl stop firewalld
[root@slave ~]# setenforce 0
  • 区域数据文件自动传送到从服务器
[root@slave ~]# ll /var/named/slaves/
total 8
-rw-r--r--. 1 named named 378 sep 12 02:11 100.168.192.zone
-rw-r--r--. 1 named named 392 sep 12 02:11 yun.com.zone

nslookup

  • 设置dns地址
[root@slave ~]# vim /etc/resolv.conf
# generated by networkmanager
search localdomain
nameserver 192.168.28.129
  • 正向查询
[root@slave ~]# nslookup www.yun.com
server:     192.168.28.129
address:    192.168.28.129#53

name:   www.yun.com
address: 192.168.100.10

[root@slave ~]# nslookup ftp.yun.com
server:     192.168.28.129
address:    192.168.28.129#53

name:   ftp.yun.com
address: 192.168.100.20

[root@slave ~]# nslookup bbs.yun.com
server:     192.168.28.129
address:    192.168.28.129#53

bbs.yun.com canonical name = www.yun.com.
name:   www.yun.com
address: 192.168.100.10

[root@slave ~]# nslookup asd.yun.com
server:     192.168.28.129
address:    192.168.28.129#53

name:   asd.yun.com
address: 8.8.8.8
  • 反向查询
[root@slave ~]# nslookup 192.168.100.10
server:     192.168.28.129
address:    192.168.28.129#53

10.100.168.192.in-addr.arpa name = www.yun.com.

[root@slave ~]# nslookup 192.168.100.20
server:     192.168.28.129
address:    192.168.28.129#53

20.100.168.192.in-addr.arpa name = ftp.yun.com.

如对本文有疑问,请在下面进行留言讨论,广大热心网友会与你互动!! 点击进行留言回复

相关文章:

验证码:
移动技术网