Linux：DNS服务(bind)-Toy模板网

这篇具有很好参考价值的文章主要介绍了Linux：DNS服务(bind)。希望对大家有所帮助。如果存在错误或未考虑完全的地方，请大家不吝赐教，您也可以点击"举报违法"按钮提交疑问。

环境

主服务器和从服务器的配置环境

主服务器

从服务器

主DNS配置文件

dns从服务器配置

环境

如果你只需要主dns服务器那么你只需要挑着主dns服务器配置看即可

我这里使用了4台虚拟机，你也可以不使用这么多根据你的电脑性能去调整

他们必须要在同一个网段，我这几个都在192.168.254.0/24网段

1——Windows server 2016 web服务器 ip为: 192.168.254.4

2——Windows10 通过域名访问网站，ip为：192.168.254.3

3——Linux centos 7 从DNS服务器 ip为：192.168.254.2

4——Linux centos 7 主DNS服务器 ip 为：192.168.254.1

主服务器和从服务器的配置环境

主服务器

关闭防火墙和selinux

systemctl stop firewalld

setenforce 0

修改主机名

hostnamectl set-hostname dns1.tarro.com

# hostnamectl set-hostname 你要修改的主机名

# 这个是dns1.tarro.com

# 从服务器我就给他命名为 dns2.tarro.com

修改本机dns配置文件

vi /etc/resolv.conf

写入

nameserver 192.168.254.1
nameserver 192.168.254.2

# 主dns服务器和从服务器的ip

修改hosts文件追加以下内容

vim /etc/hosts

192.168.254.1 dns1.tarro.com ns1
192.168.254.2 dns2.tarro.com ns2

yum安装bind软件（我这里使用的离线yum库）

Linux：rpm查询安装 && yum安装_鲍海超-GNUBHCkalitarro的博客-CSDN博客

yum -y install bind*

从服务器

关闭防火墙和selinux

systemctl stop firewalld

setenforce 0

修改主机名

hostnamectl set-hostname dns2.tarro.com

修改本机dns配置文件

vi /etc/resolv.conf

写入

nameserver 192.168.254.1
nameserver 192.168.254.2

# 主dns服务器和从服务器的ip

修改hosts文件追加以下内容

vim /etc/hosts

192.168.254.1 dns1.tarro.com ns1
192.168.254.2 dns2.tarro.com ns2

yum安装bind

yum -y install bind*

主DNS配置文件

vim /etc/named.conf

listen-on port 53 { 本机ip; };

allow-query { 那个ip或者网段可以复制; };

zone "tarro.com" IN {
type master;
file "tarro.com.zone";
allow-transfer {192.168.254.2;};

};

zone "254.168.192.in-addr.arpa" IN {
type master;
file "192.168.254.arpa";
allow-transfer {192.168.254.2;};

};

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

options {
	listen-on port 53 { 192.168.254.1; };
	listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	recursing-file  "/var/named/data/named.recursing";
	secroots-file   "/var/named/data/named.secroots";
	allow-query     { 192.168.254.0/24; };

	/* 
	 - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
	 - If you are building a RECURSIVE (caching) DNS server, you need to enable 
	   recursion. 
	 - If your recursive DNS server has a public IP address, you MUST enable access 
	   control to limit queries to your legitimate users. Failing to do so will
	   cause your server to become part of large scale DNS amplification 
	   attacks. Implementing BCP38 within your network would greatly
	   reduce such attack surface 
	*/
	recursion yes;

	dnssec-enable yes;
	dnssec-validation yes;

	/* Path to ISC DLV key */
	bindkeys-file "/etc/named.root.key";

	managed-keys-directory "/var/named/dynamic";

	pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
	type hint;
	file "named.ca";
};

zone "tarro.com" IN {
        type master;
        file "tarro.com.zone";
        allow-transfer {192.168.254.2;};

};

zone "254.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.254.arpa";
        allow-transfer {192.168.254.2;};

};




include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

配置正向文件

vim /var/named/tarro.com.zone

$TTL    86400
@               IN SOA  tarro.com.      root.tarro.com. (
        2014032900
        3H
        15M
        1W
        1D )
@       IN      NS      dns1.tarro.com.
        IN      NS      dns2.tarro.com.
ns1     IN      A       192.168.254.1
ns2     IN      A       192.168.254.2
www     IN      A       192.168.254.4
*       IN      A       192.168.254.4

配置反向文件

vim /var/named/192.168.254.arpa

$TTL    86400
@               IN SOA  tarro.com.      root.tarro.com. (
        2014032900
        3H
        15M
        1W
        1D )
        IN      NS      dns1.tarro.com.
        IN      NS      dns2.tarro.com.
1       IN      NS      dns1.tarro.com.
2       IN      NS      dns2.tarro.com.
4       IN      NS      www.tarro.com.

文件检测